--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a19ecc2-91c9-40ad-8e14-5ad13167d974","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a19ecc2-91c9-40ad-8e14-5ad13167d974","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a19ecc2-91c9-40ad-8e14-5ad13167d974","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a19ecc2-91c9-40ad-8e14-5ad13167d974","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-OSnCaip4ant6ykqW_jl7qDPItecrfoM0LwUYKzTjHOwzsqYOJOfiY3qd2ouk","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.35~maas-default-gateway-openshift-default-687ff6996-hqkpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"2a19ecc2-91c9-40ad-8e14-5ad13167d974"},"host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","id":"2a19ecc2-91c9-40ad-8e14-5ad13167d974","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":531479277,"seconds":1781018358},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.4:31046","port":31046}}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a19ecc2-91c9-40ad-8e14-5ad13167d974","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a19ecc2-91c9-40ad-8e14-5ad13167d974","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a19ecc2-91c9-40ad-8e14-5ad13167d974","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a19ecc2-91c9-40ad-8e14-5ad13167d974","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a19ecc2-91c9-40ad-8e14-5ad13167d974","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a19ecc2-91c9-40ad-8e14-5ad13167d974","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"1459b70e-9c37-4525-af9a-5017a002c1dd","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}} {"level":"info","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a19ecc2-91c9-40ad-8e14-5ad13167d974","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a19ecc2-91c9-40ad-8e14-5ad13167d974","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5fbe145-1062-43c1-85b4-7214d1bd1256","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:56942","PortSpecifier":{"PortValue":56942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5fbe145-1062-43c1-85b4-7214d1bd1256","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5fbe145-1062-43c1-85b4-7214d1bd1256","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:56942","PortSpecifier":{"PortValue":56942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018358,"nanos":567561265},"http":{"id":"b5fbe145-1062-43c1-85b4-7214d1bd1256","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5fbe145-1062-43c1-85b4-7214d1bd1256","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OSnCaip4ant6ykqW_jl7qDPItecrfoM0LwUYKzTjHOwzsqYOJOfiY3qd2ouk"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5fbe145-1062-43c1-85b4-7214d1bd1256","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OSnCaip4ant6ykqW_jl7qDPItecrfoM0LwUYKzTjHOwzsqYOJOfiY3qd2ouk\"}"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5fbe145-1062-43c1-85b4-7214d1bd1256","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5fbe145-1062-43c1-85b4-7214d1bd1256","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5fbe145-1062-43c1-85b4-7214d1bd1256","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5fbe145-1062-43c1-85b4-7214d1bd1256","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-OSnCaip4ant6ykqW_jl7qDPItecrfoM0LwUYKzTjHOwzsqYOJOfiY3qd2ouk","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.35~maas-default-gateway-openshift-default-687ff6996-hqkpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"b5fbe145-1062-43c1-85b4-7214d1bd1256"},"host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","id":"b5fbe145-1062-43c1-85b4-7214d1bd1256","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":567561265,"seconds":1781018358},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.3:56942","port":56942}}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5fbe145-1062-43c1-85b4-7214d1bd1256","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5fbe145-1062-43c1-85b4-7214d1bd1256","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5fbe145-1062-43c1-85b4-7214d1bd1256","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5fbe145-1062-43c1-85b4-7214d1bd1256","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5fbe145-1062-43c1-85b4-7214d1bd1256","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5fbe145-1062-43c1-85b4-7214d1bd1256","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"1459b70e-9c37-4525-af9a-5017a002c1dd","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}} {"level":"info","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5fbe145-1062-43c1-85b4-7214d1bd1256","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5fbe145-1062-43c1-85b4-7214d1bd1256","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be9e53f6-014f-4576-ab3e-75112f343d56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:40384","PortSpecifier":{"PortValue":40384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be9e53f6-014f-4576-ab3e-75112f343d56","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be9e53f6-014f-4576-ab3e-75112f343d56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:40384","PortSpecifier":{"PortValue":40384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018358,"nanos":599895257},"http":{"id":"be9e53f6-014f-4576-ab3e-75112f343d56","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be9e53f6-014f-4576-ab3e-75112f343d56","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OSnCaip4ant6ykqW_jl7qDPItecrfoM0LwUYKzTjHOwzsqYOJOfiY3qd2ouk"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be9e53f6-014f-4576-ab3e-75112f343d56","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OSnCaip4ant6ykqW_jl7qDPItecrfoM0LwUYKzTjHOwzsqYOJOfiY3qd2ouk\"}"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be9e53f6-014f-4576-ab3e-75112f343d56","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be9e53f6-014f-4576-ab3e-75112f343d56","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be9e53f6-014f-4576-ab3e-75112f343d56","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be9e53f6-014f-4576-ab3e-75112f343d56","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-OSnCaip4ant6ykqW_jl7qDPItecrfoM0LwUYKzTjHOwzsqYOJOfiY3qd2ouk","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.35~maas-default-gateway-openshift-default-687ff6996-hqkpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"be9e53f6-014f-4576-ab3e-75112f343d56"},"host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","id":"be9e53f6-014f-4576-ab3e-75112f343d56","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":599895257,"seconds":1781018358},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.2:40384","port":40384}}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be9e53f6-014f-4576-ab3e-75112f343d56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be9e53f6-014f-4576-ab3e-75112f343d56","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be9e53f6-014f-4576-ab3e-75112f343d56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be9e53f6-014f-4576-ab3e-75112f343d56","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be9e53f6-014f-4576-ab3e-75112f343d56","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be9e53f6-014f-4576-ab3e-75112f343d56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"1459b70e-9c37-4525-af9a-5017a002c1dd","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}} {"level":"info","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be9e53f6-014f-4576-ab3e-75112f343d56","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be9e53f6-014f-4576-ab3e-75112f343d56","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a8e6c97-7741-4005-9905-bfca95d8eff0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36340","PortSpecifier":{"PortValue":36340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a8e6c97-7741-4005-9905-bfca95d8eff0","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a8e6c97-7741-4005-9905-bfca95d8eff0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36340","PortSpecifier":{"PortValue":36340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018358,"nanos":632543902},"http":{"id":"7a8e6c97-7741-4005-9905-bfca95d8eff0","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a8e6c97-7741-4005-9905-bfca95d8eff0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OSnCaip4ant6ykqW_jl7qDPItecrfoM0LwUYKzTjHOwzsqYOJOfiY3qd2ouk"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7a8e6c97-7741-4005-9905-bfca95d8eff0","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OSnCaip4ant6ykqW_jl7qDPItecrfoM0LwUYKzTjHOwzsqYOJOfiY3qd2ouk\"}"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7a8e6c97-7741-4005-9905-bfca95d8eff0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7a8e6c97-7741-4005-9905-bfca95d8eff0","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7a8e6c97-7741-4005-9905-bfca95d8eff0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a8e6c97-7741-4005-9905-bfca95d8eff0","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-OSnCaip4ant6ykqW_jl7qDPItecrfoM0LwUYKzTjHOwzsqYOJOfiY3qd2ouk","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.35~maas-default-gateway-openshift-default-687ff6996-hqkpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"7a8e6c97-7741-4005-9905-bfca95d8eff0"},"host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","id":"7a8e6c97-7741-4005-9905-bfca95d8eff0","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":632543902,"seconds":1781018358},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.4:36340","port":36340}}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a8e6c97-7741-4005-9905-bfca95d8eff0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a8e6c97-7741-4005-9905-bfca95d8eff0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a8e6c97-7741-4005-9905-bfca95d8eff0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a8e6c97-7741-4005-9905-bfca95d8eff0","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a8e6c97-7741-4005-9905-bfca95d8eff0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a8e6c97-7741-4005-9905-bfca95d8eff0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"1459b70e-9c37-4525-af9a-5017a002c1dd","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}} {"level":"info","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a8e6c97-7741-4005-9905-bfca95d8eff0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a8e6c97-7741-4005-9905-bfca95d8eff0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8f5da7d-59c7-41ab-b10d-5be04f7d62c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:52420","PortSpecifier":{"PortValue":52420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8f5da7d-59c7-41ab-b10d-5be04f7d62c6","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8f5da7d-59c7-41ab-b10d-5be04f7d62c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:52420","PortSpecifier":{"PortValue":52420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018358,"nanos":664860968},"http":{"id":"c8f5da7d-59c7-41ab-b10d-5be04f7d62c6","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8f5da7d-59c7-41ab-b10d-5be04f7d62c6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OSnCaip4ant6ykqW_jl7qDPItecrfoM0LwUYKzTjHOwzsqYOJOfiY3qd2ouk"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8f5da7d-59c7-41ab-b10d-5be04f7d62c6","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OSnCaip4ant6ykqW_jl7qDPItecrfoM0LwUYKzTjHOwzsqYOJOfiY3qd2ouk\"}"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8f5da7d-59c7-41ab-b10d-5be04f7d62c6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8f5da7d-59c7-41ab-b10d-5be04f7d62c6","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8f5da7d-59c7-41ab-b10d-5be04f7d62c6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8f5da7d-59c7-41ab-b10d-5be04f7d62c6","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-OSnCaip4ant6ykqW_jl7qDPItecrfoM0LwUYKzTjHOwzsqYOJOfiY3qd2ouk","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQAoETkFNRRI4GjZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC02ODdmZjY5OTYtaHFrcGYKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnQKBU9XTkVSEmsaaWt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9tYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAo5Cg1XT1JLTE9BRF9OQU1FEigaJm1hYXMtZGVmYXVsdC1nYXRld2F5LW9wZW5zaGlmdC1kZWZhdWx0","x-envoy-peer-metadata-id":"router~10.132.0.35~maas-default-gateway-openshift-default-687ff6996-hqkpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"c8f5da7d-59c7-41ab-b10d-5be04f7d62c6"},"host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","id":"c8f5da7d-59c7-41ab-b10d-5be04f7d62c6","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":664860968,"seconds":1781018358},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.3:52420","port":52420}}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8f5da7d-59c7-41ab-b10d-5be04f7d62c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8f5da7d-59c7-41ab-b10d-5be04f7d62c6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8f5da7d-59c7-41ab-b10d-5be04f7d62c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8f5da7d-59c7-41ab-b10d-5be04f7d62c6","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8f5da7d-59c7-41ab-b10d-5be04f7d62c6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8f5da7d-59c7-41ab-b10d-5be04f7d62c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"1459b70e-9c37-4525-af9a-5017a002c1dd","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}} {"level":"info","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8f5da7d-59c7-41ab-b10d-5be04f7d62c6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8f5da7d-59c7-41ab-b10d-5be04f7d62c6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e636f8c-2014-4026-893a-5d6be0e58f79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:56958","PortSpecifier":{"PortValue":56958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e636f8c-2014-4026-893a-5d6be0e58f79","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e636f8c-2014-4026-893a-5d6be0e58f79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:56958","PortSpecifier":{"PortValue":56958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018358,"nanos":699868689},"http":{"id":"0e636f8c-2014-4026-893a-5d6be0e58f79","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.35~maas-default-gateway-openshift-default-687ff6996-hqkpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"0e636f8c-2014-4026-893a-5d6be0e58f79"},"path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/2"}},"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"metadata_context":{}}} {"level":"info","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e636f8c-2014-4026-893a-5d6be0e58f79","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e636f8c-2014-4026-893a-5d6be0e58f79","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** {"level":"info","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09384cfc-8160-4a0a-ac15-25c1dfaf9162","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:40392","PortSpecifier":{"PortValue":40392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09384cfc-8160-4a0a-ac15-25c1dfaf9162","method":"DELETE","path":"/maas-api/v1/api-keys/1459b70e-9c37-4525-af9a-5017a002c1dd","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09384cfc-8160-4a0a-ac15-25c1dfaf9162","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:40392","PortSpecifier":{"PortValue":40392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018358,"nanos":724393546},"http":{"id":"09384cfc-8160-4a0a-ac15-25c1dfaf9162","method":"DELETE","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/1459b70e-9c37-4525-af9a-5017a002c1dd",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"09384cfc-8160-4a0a-ac15-25c1dfaf9162","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09384cfc-8160-4a0a-ac15-25c1dfaf9162","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09384cfc-8160-4a0a-ac15-25c1dfaf9162","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"a088f395-190a-4682-b2a2-eb18b1e26d4a","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28bcd185-a82f-42b2-98c3-555061a3ed29"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09384cfc-8160-4a0a-ac15-25c1dfaf9162","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28bcd185-a82f-42b2-98c3-555061a3ed29"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"a088f395-190a-4682-b2a2-eb18b1e26d4a","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/1459b70e-9c37-4525-af9a-5017a002c1dd",":scheme":"https","accept":"*/*","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQAoETkFNRRI4GjZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC02ODdmZjY5OTYtaHFrcGYKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnQKBU9XTkVSEmsaaWt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9tYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAo5Cg1XT1JLTE9BRF9OQU1FEigaJm1hYXMtZGVmYXVsdC1nYXRld2F5LW9wZW5zaGlmdC1kZWZhdWx0","x-envoy-peer-metadata-id":"router~10.132.0.35~maas-default-gateway-openshift-default-687ff6996-hqkpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-request-id":"09384cfc-8160-4a0a-ac15-25c1dfaf9162"},"host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","id":"09384cfc-8160-4a0a-ac15-25c1dfaf9162","method":"DELETE","path":"/maas-api/v1/api-keys/1459b70e-9c37-4525-af9a-5017a002c1dd","protocol":"HTTP/2","scheme":"https","time":{"nanos":724393546,"seconds":1781018358},"url_path":"/maas-api/v1/api-keys/1459b70e-9c37-4525-af9a-5017a002c1dd","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.2:40392","port":40392}}} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09384cfc-8160-4a0a-ac15-25c1dfaf9162","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09384cfc-8160-4a0a-ac15-25c1dfaf9162","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09384cfc-8160-4a0a-ac15-25c1dfaf9162","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09384cfc-8160-4a0a-ac15-25c1dfaf9162","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0194b3c3-91e0-4968-91e5-894206517f54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:15550","PortSpecifier":{"PortValue":15550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0194b3c3-91e0-4968-91e5-894206517f54","method":"GET","path":"/maas-api/v1/subscriptions","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0194b3c3-91e0-4968-91e5-894206517f54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:15550","PortSpecifier":{"PortValue":15550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018368,"nanos":230618698},"http":{"id":"0194b3c3-91e0-4968-91e5-894206517f54","method":"GET","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"0194b3c3-91e0-4968-91e5-894206517f54","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0194b3c3-91e0-4968-91e5-894206517f54","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0194b3c3-91e0-4968-91e5-894206517f54","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0194b3c3-91e0-4968-91e5-894206517f54","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.35~maas-default-gateway-openshift-default-687ff6996-hqkpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-request-id":"0194b3c3-91e0-4968-91e5-894206517f54"},"host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","id":"0194b3c3-91e0-4968-91e5-894206517f54","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/2","scheme":"https","time":{"nanos":230618698,"seconds":1781018368},"url_path":"/maas-api/v1/subscriptions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.2:15550","port":15550}}} {"level":"debug","ts":"2026-06-09T15:19:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0194b3c3-91e0-4968-91e5-894206517f54","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0194b3c3-91e0-4968-91e5-894206517f54","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0194b3c3-91e0-4968-91e5-894206517f54","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0194b3c3-91e0-4968-91e5-894206517f54","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a0b2b39-89e0-4fde-a46a-58f748ad6a47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:59392","PortSpecifier":{"PortValue":59392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a0b2b39-89e0-4fde-a46a-58f748ad6a47","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a0b2b39-89e0-4fde-a46a-58f748ad6a47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:59392","PortSpecifier":{"PortValue":59392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018368,"nanos":705638733},"http":{"id":"2a0b2b39-89e0-4fde-a46a-58f748ad6a47","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a0b2b39-89e0-4fde-a46a-58f748ad6a47","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781018668,"groups":["Engineering","Project-Alpha"],"iat":1781018368,"iss":"https://keycloak.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:c2f46d88-b248-63e3-1735-61938279114d","preferred_username":"alice_lead","scope":"openid profile email","sid":"mAuyyP_Kc-p2hgnmTS3Lru-F","sub":"e16f5b4a-86da-437f-bfee-adcff844bbea","typ":"Bearer"}} {"level":"debug","ts":"2026-06-09T15:19:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a0b2b39-89e0-4fde-a46a-58f748ad6a47","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781018668,"groups":["Engineering","Project-Alpha"],"iat":1781018368,"iss":"https://keycloak.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:c2f46d88-b248-63e3-1735-61938279114d","preferred_username":"alice_lead","scope":"openid profile email","sid":"mAuyyP_Kc-p2hgnmTS3Lru-F","sub":"e16f5b4a-86da-437f-bfee-adcff844bbea","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","authorization":"Bearer **** ****REDACTED_JWT****","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.35~maas-default-gateway-openshift-default-687ff6996-hqkpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-request-id":"2a0b2b39-89e0-4fde-a46a-58f748ad6a47"},"host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","id":"2a0b2b39-89e0-4fde-a46a-58f748ad6a47","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/2","scheme":"https","time":{"nanos":705638733,"seconds":1781018368},"url_path":"/maas-api/v1/api-keys","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.3:59392","port":59392}}} {"level":"debug","ts":"2026-06-09T15:19:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a0b2b39-89e0-4fde-a46a-58f748ad6a47","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-06-09T15:19:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a0b2b39-89e0-4fde-a46a-58f748ad6a47","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-06-09T15:19:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a0b2b39-89e0-4fde-a46a-58f748ad6a47","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"info","ts":"2026-06-09T15:19:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a0b2b39-89e0-4fde-a46a-58f748ad6a47","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a0b2b39-89e0-4fde-a46a-58f748ad6a47","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d0b77de-4892-4cad-86fd-2d7cf8966192","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:18826","PortSpecifier":{"PortValue":18826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d0b77de-4892-4cad-86fd-2d7cf8966192","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d0b77de-4892-4cad-86fd-2d7cf8966192","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:18826","PortSpecifier":{"PortValue":18826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":150943428},"http":{"id":"3d0b77de-4892-4cad-86fd-2d7cf8966192","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"3d0b77de-4892-4cad-86fd-2d7cf8966192","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d0b77de-4892-4cad-86fd-2d7cf8966192","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d0b77de-4892-4cad-86fd-2d7cf8966192","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d0b77de-4892-4cad-86fd-2d7cf8966192","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d0b77de-4892-4cad-86fd-2d7cf8966192","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d0b77de-4892-4cad-86fd-2d7cf8966192","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d0b77de-4892-4cad-86fd-2d7cf8966192","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d0b77de-4892-4cad-86fd-2d7cf8966192","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dabc0cd-25fd-4064-8f66-be179ee75fff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54384","PortSpecifier":{"PortValue":54384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8dabc0cd-25fd-4064-8f66-be179ee75fff","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dabc0cd-25fd-4064-8f66-be179ee75fff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54384","PortSpecifier":{"PortValue":54384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":192306861},"http":{"id":"8dabc0cd-25fd-4064-8f66-be179ee75fff","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"8dabc0cd-25fd-4064-8f66-be179ee75fff","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8dabc0cd-25fd-4064-8f66-be179ee75fff","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8dabc0cd-25fd-4064-8f66-be179ee75fff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8dabc0cd-25fd-4064-8f66-be179ee75fff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dabc0cd-25fd-4064-8f66-be179ee75fff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dabc0cd-25fd-4064-8f66-be179ee75fff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dabc0cd-25fd-4064-8f66-be179ee75fff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dabc0cd-25fd-4064-8f66-be179ee75fff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0963627c-a780-4ed7-987a-f84497d2ddc3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:17318","PortSpecifier":{"PortValue":17318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0963627c-a780-4ed7-987a-f84497d2ddc3","method":"GET","path":"/maas-api/v1/api-keys/82e3ec66-ace2-4f74-ad89-0c8241b79762","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0963627c-a780-4ed7-987a-f84497d2ddc3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:17318","PortSpecifier":{"PortValue":17318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":226391861},"http":{"id":"0963627c-a780-4ed7-987a-f84497d2ddc3","method":"GET","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/82e3ec66-ace2-4f74-ad89-0c8241b79762",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"0963627c-a780-4ed7-987a-f84497d2ddc3","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0963627c-a780-4ed7-987a-f84497d2ddc3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0963627c-a780-4ed7-987a-f84497d2ddc3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0963627c-a780-4ed7-987a-f84497d2ddc3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/82e3ec66-ace2-4f74-ad89-0c8241b79762",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0963627c-a780-4ed7-987a-f84497d2ddc3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0963627c-a780-4ed7-987a-f84497d2ddc3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0963627c-a780-4ed7-987a-f84497d2ddc3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0963627c-a780-4ed7-987a-f84497d2ddc3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"881b7d90-979e-4fbb-9494-215ed1803a2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:59402","PortSpecifier":{"PortValue":59402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"881b7d90-979e-4fbb-9494-215ed1803a2a","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"881b7d90-979e-4fbb-9494-215ed1803a2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:59402","PortSpecifier":{"PortValue":59402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":272303139},"http":{"id":"881b7d90-979e-4fbb-9494-215ed1803a2a","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"881b7d90-979e-4fbb-9494-215ed1803a2a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"881b7d90-979e-4fbb-9494-215ed1803a2a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"881b7d90-979e-4fbb-9494-215ed1803a2a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"881b7d90-979e-4fbb-9494-215ed1803a2a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"881b7d90-979e-4fbb-9494-215ed1803a2a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"881b7d90-979e-4fbb-9494-215ed1803a2a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"881b7d90-979e-4fbb-9494-215ed1803a2a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"881b7d90-979e-4fbb-9494-215ed1803a2a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5977103-9229-4e41-af1d-bd6b445ba791","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64318","PortSpecifier":{"PortValue":64318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5977103-9229-4e41-af1d-bd6b445ba791","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5977103-9229-4e41-af1d-bd6b445ba791","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64318","PortSpecifier":{"PortValue":64318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":304330364},"http":{"id":"d5977103-9229-4e41-af1d-bd6b445ba791","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"d5977103-9229-4e41-af1d-bd6b445ba791","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d5977103-9229-4e41-af1d-bd6b445ba791","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5977103-9229-4e41-af1d-bd6b445ba791","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5977103-9229-4e41-af1d-bd6b445ba791","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5977103-9229-4e41-af1d-bd6b445ba791","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5977103-9229-4e41-af1d-bd6b445ba791","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5977103-9229-4e41-af1d-bd6b445ba791","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5977103-9229-4e41-af1d-bd6b445ba791","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8bd9d08-3f55-4d9e-9740-08a37ba4c9ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41536","PortSpecifier":{"PortValue":41536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8bd9d08-3f55-4d9e-9740-08a37ba4c9ce","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8bd9d08-3f55-4d9e-9740-08a37ba4c9ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41536","PortSpecifier":{"PortValue":41536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":336440441},"http":{"id":"a8bd9d08-3f55-4d9e-9740-08a37ba4c9ce","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"a8bd9d08-3f55-4d9e-9740-08a37ba4c9ce","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a8bd9d08-3f55-4d9e-9740-08a37ba4c9ce","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8bd9d08-3f55-4d9e-9740-08a37ba4c9ce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8bd9d08-3f55-4d9e-9740-08a37ba4c9ce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8bd9d08-3f55-4d9e-9740-08a37ba4c9ce","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8bd9d08-3f55-4d9e-9740-08a37ba4c9ce","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8bd9d08-3f55-4d9e-9740-08a37ba4c9ce","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8bd9d08-3f55-4d9e-9740-08a37ba4c9ce","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"144ce2fc-934b-4f6c-b8a0-abce41903ca2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39806","PortSpecifier":{"PortValue":39806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"144ce2fc-934b-4f6c-b8a0-abce41903ca2","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"144ce2fc-934b-4f6c-b8a0-abce41903ca2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39806","PortSpecifier":{"PortValue":39806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":371346826},"http":{"id":"144ce2fc-934b-4f6c-b8a0-abce41903ca2","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"144ce2fc-934b-4f6c-b8a0-abce41903ca2","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"144ce2fc-934b-4f6c-b8a0-abce41903ca2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"144ce2fc-934b-4f6c-b8a0-abce41903ca2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"144ce2fc-934b-4f6c-b8a0-abce41903ca2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"144ce2fc-934b-4f6c-b8a0-abce41903ca2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"144ce2fc-934b-4f6c-b8a0-abce41903ca2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"144ce2fc-934b-4f6c-b8a0-abce41903ca2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"144ce2fc-934b-4f6c-b8a0-abce41903ca2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"198e852f-dd1c-450c-b742-b6eeb497a240","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34346","PortSpecifier":{"PortValue":34346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"198e852f-dd1c-450c-b742-b6eeb497a240","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"198e852f-dd1c-450c-b742-b6eeb497a240","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34346","PortSpecifier":{"PortValue":34346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":406808916},"http":{"id":"198e852f-dd1c-450c-b742-b6eeb497a240","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"198e852f-dd1c-450c-b742-b6eeb497a240","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"198e852f-dd1c-450c-b742-b6eeb497a240","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"198e852f-dd1c-450c-b742-b6eeb497a240","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"198e852f-dd1c-450c-b742-b6eeb497a240","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"198e852f-dd1c-450c-b742-b6eeb497a240","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"198e852f-dd1c-450c-b742-b6eeb497a240","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"198e852f-dd1c-450c-b742-b6eeb497a240","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"198e852f-dd1c-450c-b742-b6eeb497a240","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca490bef-7516-4e90-98d1-4ef734fe0c4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54386","PortSpecifier":{"PortValue":54386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca490bef-7516-4e90-98d1-4ef734fe0c4a","method":"DELETE","path":"/maas-api/v1/api-keys/75e47309-7f21-48e2-921b-a4fc0d6b4b1a","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca490bef-7516-4e90-98d1-4ef734fe0c4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54386","PortSpecifier":{"PortValue":54386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":439449668},"http":{"id":"ca490bef-7516-4e90-98d1-4ef734fe0c4a","method":"DELETE","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/75e47309-7f21-48e2-921b-a4fc0d6b4b1a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"ca490bef-7516-4e90-98d1-4ef734fe0c4a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ca490bef-7516-4e90-98d1-4ef734fe0c4a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca490bef-7516-4e90-98d1-4ef734fe0c4a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca490bef-7516-4e90-98d1-4ef734fe0c4a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/75e47309-7f21-48e2-921b-a4fc0d6b4b1a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca490bef-7516-4e90-98d1-4ef734fe0c4a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca490bef-7516-4e90-98d1-4ef734fe0c4a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca490bef-7516-4e90-98d1-4ef734fe0c4a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca490bef-7516-4e90-98d1-4ef734fe0c4a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2ed2003-def1-44c8-92ba-35a40db2b30e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64330","PortSpecifier":{"PortValue":64330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2ed2003-def1-44c8-92ba-35a40db2b30e","method":"GET","path":"/maas-api/v1/api-keys/75e47309-7f21-48e2-921b-a4fc0d6b4b1a","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2ed2003-def1-44c8-92ba-35a40db2b30e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64330","PortSpecifier":{"PortValue":64330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":471356279},"http":{"id":"b2ed2003-def1-44c8-92ba-35a40db2b30e","method":"GET","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/75e47309-7f21-48e2-921b-a4fc0d6b4b1a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"b2ed2003-def1-44c8-92ba-35a40db2b30e","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b2ed2003-def1-44c8-92ba-35a40db2b30e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2ed2003-def1-44c8-92ba-35a40db2b30e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2ed2003-def1-44c8-92ba-35a40db2b30e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/75e47309-7f21-48e2-921b-a4fc0d6b4b1a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2ed2003-def1-44c8-92ba-35a40db2b30e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2ed2003-def1-44c8-92ba-35a40db2b30e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2ed2003-def1-44c8-92ba-35a40db2b30e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2ed2003-def1-44c8-92ba-35a40db2b30e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cee335bf-80f6-4bb4-a786-5ed8fe59b636","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15718","PortSpecifier":{"PortValue":15718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cee335bf-80f6-4bb4-a786-5ed8fe59b636","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cee335bf-80f6-4bb4-a786-5ed8fe59b636","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15718","PortSpecifier":{"PortValue":15718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":511319462},"http":{"id":"cee335bf-80f6-4bb4-a786-5ed8fe59b636","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"cee335bf-80f6-4bb4-a786-5ed8fe59b636","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cee335bf-80f6-4bb4-a786-5ed8fe59b636","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cee335bf-80f6-4bb4-a786-5ed8fe59b636","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cee335bf-80f6-4bb4-a786-5ed8fe59b636","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cee335bf-80f6-4bb4-a786-5ed8fe59b636","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cee335bf-80f6-4bb4-a786-5ed8fe59b636","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cee335bf-80f6-4bb4-a786-5ed8fe59b636","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cee335bf-80f6-4bb4-a786-5ed8fe59b636","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d95d06f5-3328-49f4-93a8-3c98c3e177bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41550","PortSpecifier":{"PortValue":41550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d95d06f5-3328-49f4-93a8-3c98c3e177bf","method":"GET","path":"/maas-api/v1/api-keys/cd3b8583-253b-43eb-9722-4eb50573ea05","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d95d06f5-3328-49f4-93a8-3c98c3e177bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41550","PortSpecifier":{"PortValue":41550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":540989567},"http":{"id":"d95d06f5-3328-49f4-93a8-3c98c3e177bf","method":"GET","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cd3b8583-253b-43eb-9722-4eb50573ea05",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"d95d06f5-3328-49f4-93a8-3c98c3e177bf","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d95d06f5-3328-49f4-93a8-3c98c3e177bf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d95d06f5-3328-49f4-93a8-3c98c3e177bf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d95d06f5-3328-49f4-93a8-3c98c3e177bf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cd3b8583-253b-43eb-9722-4eb50573ea05",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d95d06f5-3328-49f4-93a8-3c98c3e177bf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d95d06f5-3328-49f4-93a8-3c98c3e177bf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d95d06f5-3328-49f4-93a8-3c98c3e177bf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d95d06f5-3328-49f4-93a8-3c98c3e177bf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"081b2876-4c6f-4ca0-8fba-d44d6d713a89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39822","PortSpecifier":{"PortValue":39822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"081b2876-4c6f-4ca0-8fba-d44d6d713a89","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"081b2876-4c6f-4ca0-8fba-d44d6d713a89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39822","PortSpecifier":{"PortValue":39822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":569318304},"http":{"id":"081b2876-4c6f-4ca0-8fba-d44d6d713a89","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"081b2876-4c6f-4ca0-8fba-d44d6d713a89","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"081b2876-4c6f-4ca0-8fba-d44d6d713a89","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"081b2876-4c6f-4ca0-8fba-d44d6d713a89","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"a088f395-190a-4682-b2a2-eb18b1e26d4a","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28bcd185-a82f-42b2-98c3-555061a3ed29"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"081b2876-4c6f-4ca0-8fba-d44d6d713a89","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28bcd185-a82f-42b2-98c3-555061a3ed29"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"a088f395-190a-4682-b2a2-eb18b1e26d4a","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"081b2876-4c6f-4ca0-8fba-d44d6d713a89","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"081b2876-4c6f-4ca0-8fba-d44d6d713a89","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"081b2876-4c6f-4ca0-8fba-d44d6d713a89","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"081b2876-4c6f-4ca0-8fba-d44d6d713a89","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e99393a-dc3b-4e56-b34a-a51f785e7703","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54392","PortSpecifier":{"PortValue":54392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e99393a-dc3b-4e56-b34a-a51f785e7703","method":"DELETE","path":"/maas-api/v1/api-keys/cd3b8583-253b-43eb-9722-4eb50573ea05","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e99393a-dc3b-4e56-b34a-a51f785e7703","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54392","PortSpecifier":{"PortValue":54392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":603416583},"http":{"id":"2e99393a-dc3b-4e56-b34a-a51f785e7703","method":"DELETE","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/cd3b8583-253b-43eb-9722-4eb50573ea05",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"2e99393a-dc3b-4e56-b34a-a51f785e7703","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2e99393a-dc3b-4e56-b34a-a51f785e7703","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e99393a-dc3b-4e56-b34a-a51f785e7703","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"a088f395-190a-4682-b2a2-eb18b1e26d4a","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28bcd185-a82f-42b2-98c3-555061a3ed29"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e99393a-dc3b-4e56-b34a-a51f785e7703","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28bcd185-a82f-42b2-98c3-555061a3ed29"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"a088f395-190a-4682-b2a2-eb18b1e26d4a","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/cd3b8583-253b-43eb-9722-4eb50573ea05",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e99393a-dc3b-4e56-b34a-a51f785e7703","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e99393a-dc3b-4e56-b34a-a51f785e7703","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e99393a-dc3b-4e56-b34a-a51f785e7703","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e99393a-dc3b-4e56-b34a-a51f785e7703","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b7f9806-161e-4d07-8b84-a227ef4c5a8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34350","PortSpecifier":{"PortValue":34350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b7f9806-161e-4d07-8b84-a227ef4c5a8d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b7f9806-161e-4d07-8b84-a227ef4c5a8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34350","PortSpecifier":{"PortValue":34350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":637263200},"http":{"id":"4b7f9806-161e-4d07-8b84-a227ef4c5a8d","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"4b7f9806-161e-4d07-8b84-a227ef4c5a8d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4b7f9806-161e-4d07-8b84-a227ef4c5a8d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b7f9806-161e-4d07-8b84-a227ef4c5a8d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"a088f395-190a-4682-b2a2-eb18b1e26d4a","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28bcd185-a82f-42b2-98c3-555061a3ed29"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b7f9806-161e-4d07-8b84-a227ef4c5a8d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28bcd185-a82f-42b2-98c3-555061a3ed29"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"a088f395-190a-4682-b2a2-eb18b1e26d4a","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b7f9806-161e-4d07-8b84-a227ef4c5a8d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b7f9806-161e-4d07-8b84-a227ef4c5a8d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b7f9806-161e-4d07-8b84-a227ef4c5a8d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b7f9806-161e-4d07-8b84-a227ef4c5a8d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4a12c69-4f68-4cc4-ab0d-e3fab028359a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15720","PortSpecifier":{"PortValue":15720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4a12c69-4f68-4cc4-ab0d-e3fab028359a","method":"GET","path":"/maas-api/v1/api-keys/22ba770d-6e97-4ca0-a4b7-85c0c2da194c","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4a12c69-4f68-4cc4-ab0d-e3fab028359a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15720","PortSpecifier":{"PortValue":15720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":667417173},"http":{"id":"f4a12c69-4f68-4cc4-ab0d-e3fab028359a","method":"GET","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/22ba770d-6e97-4ca0-a4b7-85c0c2da194c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"f4a12c69-4f68-4cc4-ab0d-e3fab028359a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f4a12c69-4f68-4cc4-ab0d-e3fab028359a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4a12c69-4f68-4cc4-ab0d-e3fab028359a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4a12c69-4f68-4cc4-ab0d-e3fab028359a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/22ba770d-6e97-4ca0-a4b7-85c0c2da194c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4a12c69-4f68-4cc4-ab0d-e3fab028359a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4a12c69-4f68-4cc4-ab0d-e3fab028359a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4a12c69-4f68-4cc4-ab0d-e3fab028359a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4a12c69-4f68-4cc4-ab0d-e3fab028359a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5d96872-1a0f-4451-b384-f137c818a99a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64344","PortSpecifier":{"PortValue":64344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5d96872-1a0f-4451-b384-f137c818a99a","method":"DELETE","path":"/maas-api/v1/api-keys/22ba770d-6e97-4ca0-a4b7-85c0c2da194c","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5d96872-1a0f-4451-b384-f137c818a99a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64344","PortSpecifier":{"PortValue":64344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":703278960},"http":{"id":"a5d96872-1a0f-4451-b384-f137c818a99a","method":"DELETE","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/22ba770d-6e97-4ca0-a4b7-85c0c2da194c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"a5d96872-1a0f-4451-b384-f137c818a99a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a5d96872-1a0f-4451-b384-f137c818a99a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5d96872-1a0f-4451-b384-f137c818a99a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5d96872-1a0f-4451-b384-f137c818a99a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/22ba770d-6e97-4ca0-a4b7-85c0c2da194c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5d96872-1a0f-4451-b384-f137c818a99a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5d96872-1a0f-4451-b384-f137c818a99a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5d96872-1a0f-4451-b384-f137c818a99a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5d96872-1a0f-4451-b384-f137c818a99a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69a31d97-3ead-472e-aa12-4cae7cb8f412","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39836","PortSpecifier":{"PortValue":39836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69a31d97-3ead-472e-aa12-4cae7cb8f412","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69a31d97-3ead-472e-aa12-4cae7cb8f412","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39836","PortSpecifier":{"PortValue":39836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":737915328},"http":{"id":"69a31d97-3ead-472e-aa12-4cae7cb8f412","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"69a31d97-3ead-472e-aa12-4cae7cb8f412","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69a31d97-3ead-472e-aa12-4cae7cb8f412","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69a31d97-3ead-472e-aa12-4cae7cb8f412","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69a31d97-3ead-472e-aa12-4cae7cb8f412","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69a31d97-3ead-472e-aa12-4cae7cb8f412","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69a31d97-3ead-472e-aa12-4cae7cb8f412","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69a31d97-3ead-472e-aa12-4cae7cb8f412","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69a31d97-3ead-472e-aa12-4cae7cb8f412","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d765951c-da7a-4e3e-9706-5b482c92dd5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41558","PortSpecifier":{"PortValue":41558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d765951c-da7a-4e3e-9706-5b482c92dd5e","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d765951c-da7a-4e3e-9706-5b482c92dd5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41558","PortSpecifier":{"PortValue":41558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":770436333},"http":{"id":"d765951c-da7a-4e3e-9706-5b482c92dd5e","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"d765951c-da7a-4e3e-9706-5b482c92dd5e","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d765951c-da7a-4e3e-9706-5b482c92dd5e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d765951c-da7a-4e3e-9706-5b482c92dd5e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d765951c-da7a-4e3e-9706-5b482c92dd5e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d765951c-da7a-4e3e-9706-5b482c92dd5e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d765951c-da7a-4e3e-9706-5b482c92dd5e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d765951c-da7a-4e3e-9706-5b482c92dd5e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d765951c-da7a-4e3e-9706-5b482c92dd5e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e7524a8-8bdd-4858-b405-eb12b042aea6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54404","PortSpecifier":{"PortValue":54404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e7524a8-8bdd-4858-b405-eb12b042aea6","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e7524a8-8bdd-4858-b405-eb12b042aea6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54404","PortSpecifier":{"PortValue":54404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":804938919},"http":{"id":"2e7524a8-8bdd-4858-b405-eb12b042aea6","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"2e7524a8-8bdd-4858-b405-eb12b042aea6","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2e7524a8-8bdd-4858-b405-eb12b042aea6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e7524a8-8bdd-4858-b405-eb12b042aea6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e7524a8-8bdd-4858-b405-eb12b042aea6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e7524a8-8bdd-4858-b405-eb12b042aea6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e7524a8-8bdd-4858-b405-eb12b042aea6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e7524a8-8bdd-4858-b405-eb12b042aea6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e7524a8-8bdd-4858-b405-eb12b042aea6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bdae442-9728-4523-b127-29fcc7146df0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34366","PortSpecifier":{"PortValue":34366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8bdae442-9728-4523-b127-29fcc7146df0","method":"GET","path":"/maas-api/v1/api-keys/e92db95d-6ab4-4e44-84b1-3d849799c132","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bdae442-9728-4523-b127-29fcc7146df0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34366","PortSpecifier":{"PortValue":34366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":839480053},"http":{"id":"8bdae442-9728-4523-b127-29fcc7146df0","method":"GET","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e92db95d-6ab4-4e44-84b1-3d849799c132",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"8bdae442-9728-4523-b127-29fcc7146df0","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8bdae442-9728-4523-b127-29fcc7146df0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8bdae442-9728-4523-b127-29fcc7146df0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8bdae442-9728-4523-b127-29fcc7146df0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e92db95d-6ab4-4e44-84b1-3d849799c132",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bdae442-9728-4523-b127-29fcc7146df0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bdae442-9728-4523-b127-29fcc7146df0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bdae442-9728-4523-b127-29fcc7146df0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bdae442-9728-4523-b127-29fcc7146df0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10f09276-383e-4463-bef1-a9eec9a274c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15730","PortSpecifier":{"PortValue":15730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"10f09276-383e-4463-bef1-a9eec9a274c4","method":"POST","path":"/maas-api/v1/api-keys/bulk-revoke","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10f09276-383e-4463-bef1-a9eec9a274c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15730","PortSpecifier":{"PortValue":15730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":869952422},"http":{"id":"10f09276-383e-4463-bef1-a9eec9a274c4","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"10f09276-383e-4463-bef1-a9eec9a274c4","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"10f09276-383e-4463-bef1-a9eec9a274c4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"10f09276-383e-4463-bef1-a9eec9a274c4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"10f09276-383e-4463-bef1-a9eec9a274c4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10f09276-383e-4463-bef1-a9eec9a274c4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10f09276-383e-4463-bef1-a9eec9a274c4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10f09276-383e-4463-bef1-a9eec9a274c4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10f09276-383e-4463-bef1-a9eec9a274c4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14ed75f6-d4b0-41ff-8a4b-4b06a4fae1f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64352","PortSpecifier":{"PortValue":64352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"14ed75f6-d4b0-41ff-8a4b-4b06a4fae1f2","method":"GET","path":"/maas-api/v1/api-keys/e92db95d-6ab4-4e44-84b1-3d849799c132","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14ed75f6-d4b0-41ff-8a4b-4b06a4fae1f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64352","PortSpecifier":{"PortValue":64352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":901477936},"http":{"id":"14ed75f6-d4b0-41ff-8a4b-4b06a4fae1f2","method":"GET","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e92db95d-6ab4-4e44-84b1-3d849799c132",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"14ed75f6-d4b0-41ff-8a4b-4b06a4fae1f2","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"14ed75f6-d4b0-41ff-8a4b-4b06a4fae1f2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"14ed75f6-d4b0-41ff-8a4b-4b06a4fae1f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"14ed75f6-d4b0-41ff-8a4b-4b06a4fae1f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e92db95d-6ab4-4e44-84b1-3d849799c132",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14ed75f6-d4b0-41ff-8a4b-4b06a4fae1f2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14ed75f6-d4b0-41ff-8a4b-4b06a4fae1f2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14ed75f6-d4b0-41ff-8a4b-4b06a4fae1f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14ed75f6-d4b0-41ff-8a4b-4b06a4fae1f2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf434f61-3c18-4d92-b3d2-9021307d5cfa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39846","PortSpecifier":{"PortValue":39846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf434f61-3c18-4d92-b3d2-9021307d5cfa","method":"GET","path":"/maas-api/v1/api-keys/09c9a7d4-072c-4d1d-9438-852fcbb230a4","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf434f61-3c18-4d92-b3d2-9021307d5cfa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39846","PortSpecifier":{"PortValue":39846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":929876825},"http":{"id":"bf434f61-3c18-4d92-b3d2-9021307d5cfa","method":"GET","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/09c9a7d4-072c-4d1d-9438-852fcbb230a4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"bf434f61-3c18-4d92-b3d2-9021307d5cfa","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bf434f61-3c18-4d92-b3d2-9021307d5cfa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf434f61-3c18-4d92-b3d2-9021307d5cfa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf434f61-3c18-4d92-b3d2-9021307d5cfa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/09c9a7d4-072c-4d1d-9438-852fcbb230a4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf434f61-3c18-4d92-b3d2-9021307d5cfa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf434f61-3c18-4d92-b3d2-9021307d5cfa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf434f61-3c18-4d92-b3d2-9021307d5cfa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf434f61-3c18-4d92-b3d2-9021307d5cfa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a5d63b2-7e46-47a2-979f-19dd0f8dff22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41564","PortSpecifier":{"PortValue":41564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a5d63b2-7e46-47a2-979f-19dd0f8dff22","method":"GET","path":"/maas-api/v1/api-keys/f3e768da-7dae-4b60-ac7f-f883ffbf229a","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a5d63b2-7e46-47a2-979f-19dd0f8dff22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41564","PortSpecifier":{"PortValue":41564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018378,"nanos":958389322},"http":{"id":"6a5d63b2-7e46-47a2-979f-19dd0f8dff22","method":"GET","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f3e768da-7dae-4b60-ac7f-f883ffbf229a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"6a5d63b2-7e46-47a2-979f-19dd0f8dff22","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6a5d63b2-7e46-47a2-979f-19dd0f8dff22","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a5d63b2-7e46-47a2-979f-19dd0f8dff22","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a5d63b2-7e46-47a2-979f-19dd0f8dff22","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f3e768da-7dae-4b60-ac7f-f883ffbf229a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a5d63b2-7e46-47a2-979f-19dd0f8dff22","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a5d63b2-7e46-47a2-979f-19dd0f8dff22","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a5d63b2-7e46-47a2-979f-19dd0f8dff22","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a5d63b2-7e46-47a2-979f-19dd0f8dff22","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"039ec000-5cde-4b40-924e-c91d49f2db12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34376","PortSpecifier":{"PortValue":34376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"039ec000-5cde-4b40-924e-c91d49f2db12","method":"POST","path":"/maas-api/v1/api-keys/bulk-revoke","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"039ec000-5cde-4b40-924e-c91d49f2db12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34376","PortSpecifier":{"PortValue":34376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018379,"nanos":1647847},"http":{"id":"039ec000-5cde-4b40-924e-c91d49f2db12","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"039ec000-5cde-4b40-924e-c91d49f2db12","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"039ec000-5cde-4b40-924e-c91d49f2db12","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"039ec000-5cde-4b40-924e-c91d49f2db12","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"039ec000-5cde-4b40-924e-c91d49f2db12","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"039ec000-5cde-4b40-924e-c91d49f2db12","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"039ec000-5cde-4b40-924e-c91d49f2db12","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"039ec000-5cde-4b40-924e-c91d49f2db12","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"039ec000-5cde-4b40-924e-c91d49f2db12","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6da64893-6c1f-4f3a-a548-fe422fad6094","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15740","PortSpecifier":{"PortValue":15740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6da64893-6c1f-4f3a-a548-fe422fad6094","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6da64893-6c1f-4f3a-a548-fe422fad6094","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15740","PortSpecifier":{"PortValue":15740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018379,"nanos":35259752},"http":{"id":"6da64893-6c1f-4f3a-a548-fe422fad6094","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"6da64893-6c1f-4f3a-a548-fe422fad6094","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6da64893-6c1f-4f3a-a548-fe422fad6094","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6da64893-6c1f-4f3a-a548-fe422fad6094","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6da64893-6c1f-4f3a-a548-fe422fad6094","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6da64893-6c1f-4f3a-a548-fe422fad6094","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6da64893-6c1f-4f3a-a548-fe422fad6094","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6da64893-6c1f-4f3a-a548-fe422fad6094","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6da64893-6c1f-4f3a-a548-fe422fad6094","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"305c6715-5083-421c-bc65-674dd879a354","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54418","PortSpecifier":{"PortValue":54418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"305c6715-5083-421c-bc65-674dd879a354","method":"GET","path":"/maas-api/v1/api-keys/769db30d-eff2-4fe7-88c1-5a3e96aa2683","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"305c6715-5083-421c-bc65-674dd879a354","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54418","PortSpecifier":{"PortValue":54418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018379,"nanos":67114036},"http":{"id":"305c6715-5083-421c-bc65-674dd879a354","method":"GET","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/769db30d-eff2-4fe7-88c1-5a3e96aa2683",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"305c6715-5083-421c-bc65-674dd879a354","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"305c6715-5083-421c-bc65-674dd879a354","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"305c6715-5083-421c-bc65-674dd879a354","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"305c6715-5083-421c-bc65-674dd879a354","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/769db30d-eff2-4fe7-88c1-5a3e96aa2683",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"305c6715-5083-421c-bc65-674dd879a354","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"305c6715-5083-421c-bc65-674dd879a354","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"305c6715-5083-421c-bc65-674dd879a354","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"305c6715-5083-421c-bc65-674dd879a354","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90bcc15f-4bdc-4b34-aef5-995452304420","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39850","PortSpecifier":{"PortValue":39850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90bcc15f-4bdc-4b34-aef5-995452304420","method":"POST","path":"/maas-api/v1/api-keys/bulk-revoke","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90bcc15f-4bdc-4b34-aef5-995452304420","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39850","PortSpecifier":{"PortValue":39850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018379,"nanos":98972103},"http":{"id":"90bcc15f-4bdc-4b34-aef5-995452304420","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"90bcc15f-4bdc-4b34-aef5-995452304420","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"90bcc15f-4bdc-4b34-aef5-995452304420","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90bcc15f-4bdc-4b34-aef5-995452304420","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"a088f395-190a-4682-b2a2-eb18b1e26d4a","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28bcd185-a82f-42b2-98c3-555061a3ed29"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90bcc15f-4bdc-4b34-aef5-995452304420","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28bcd185-a82f-42b2-98c3-555061a3ed29"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"a088f395-190a-4682-b2a2-eb18b1e26d4a","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90bcc15f-4bdc-4b34-aef5-995452304420","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90bcc15f-4bdc-4b34-aef5-995452304420","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90bcc15f-4bdc-4b34-aef5-995452304420","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90bcc15f-4bdc-4b34-aef5-995452304420","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4c39462-3a73-439c-90a2-b1209465232d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34390","PortSpecifier":{"PortValue":34390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4c39462-3a73-439c-90a2-b1209465232d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4c39462-3a73-439c-90a2-b1209465232d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34390","PortSpecifier":{"PortValue":34390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018379,"nanos":136628067},"http":{"id":"a4c39462-3a73-439c-90a2-b1209465232d","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"a4c39462-3a73-439c-90a2-b1209465232d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a4c39462-3a73-439c-90a2-b1209465232d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4c39462-3a73-439c-90a2-b1209465232d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4c39462-3a73-439c-90a2-b1209465232d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4c39462-3a73-439c-90a2-b1209465232d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4c39462-3a73-439c-90a2-b1209465232d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4c39462-3a73-439c-90a2-b1209465232d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4c39462-3a73-439c-90a2-b1209465232d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5840b633-6ef8-4b57-9074-413a03aa84ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15752","PortSpecifier":{"PortValue":15752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5840b633-6ef8-4b57-9074-413a03aa84ed","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5840b633-6ef8-4b57-9074-413a03aa84ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15752","PortSpecifier":{"PortValue":15752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018379,"nanos":169358782},"http":{"id":"5840b633-6ef8-4b57-9074-413a03aa84ed","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"5840b633-6ef8-4b57-9074-413a03aa84ed","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5840b633-6ef8-4b57-9074-413a03aa84ed","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5840b633-6ef8-4b57-9074-413a03aa84ed","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5840b633-6ef8-4b57-9074-413a03aa84ed","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5840b633-6ef8-4b57-9074-413a03aa84ed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5840b633-6ef8-4b57-9074-413a03aa84ed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5840b633-6ef8-4b57-9074-413a03aa84ed","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5840b633-6ef8-4b57-9074-413a03aa84ed","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79512b66-3632-4ab5-b640-29f3099c4ae7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39866","PortSpecifier":{"PortValue":39866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79512b66-3632-4ab5-b640-29f3099c4ae7","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79512b66-3632-4ab5-b640-29f3099c4ae7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39866","PortSpecifier":{"PortValue":39866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018379,"nanos":202215476},"http":{"id":"79512b66-3632-4ab5-b640-29f3099c4ae7","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"79512b66-3632-4ab5-b640-29f3099c4ae7","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"79512b66-3632-4ab5-b640-29f3099c4ae7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79512b66-3632-4ab5-b640-29f3099c4ae7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79512b66-3632-4ab5-b640-29f3099c4ae7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79512b66-3632-4ab5-b640-29f3099c4ae7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79512b66-3632-4ab5-b640-29f3099c4ae7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79512b66-3632-4ab5-b640-29f3099c4ae7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79512b66-3632-4ab5-b640-29f3099c4ae7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f23d4fa-1714-4838-8712-26d14247c545","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64362","PortSpecifier":{"PortValue":64362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f23d4fa-1714-4838-8712-26d14247c545","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f23d4fa-1714-4838-8712-26d14247c545","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64362","PortSpecifier":{"PortValue":64362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018379,"nanos":235871247},"http":{"id":"9f23d4fa-1714-4838-8712-26d14247c545","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"9f23d4fa-1714-4838-8712-26d14247c545","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9f23d4fa-1714-4838-8712-26d14247c545","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f23d4fa-1714-4838-8712-26d14247c545","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f23d4fa-1714-4838-8712-26d14247c545","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f23d4fa-1714-4838-8712-26d14247c545","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f23d4fa-1714-4838-8712-26d14247c545","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f23d4fa-1714-4838-8712-26d14247c545","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f23d4fa-1714-4838-8712-26d14247c545","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7dcb3fd6-00ce-4709-af56-4affbac007f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34398","PortSpecifier":{"PortValue":34398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7dcb3fd6-00ce-4709-af56-4affbac007f7","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7dcb3fd6-00ce-4709-af56-4affbac007f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34398","PortSpecifier":{"PortValue":34398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018379,"nanos":270278874},"http":{"id":"7dcb3fd6-00ce-4709-af56-4affbac007f7","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"7dcb3fd6-00ce-4709-af56-4affbac007f7","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7dcb3fd6-00ce-4709-af56-4affbac007f7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7dcb3fd6-00ce-4709-af56-4affbac007f7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7dcb3fd6-00ce-4709-af56-4affbac007f7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7dcb3fd6-00ce-4709-af56-4affbac007f7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7dcb3fd6-00ce-4709-af56-4affbac007f7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7dcb3fd6-00ce-4709-af56-4affbac007f7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7dcb3fd6-00ce-4709-af56-4affbac007f7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28834206-79c8-4b9a-8ef2-364b772b2fb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41566","PortSpecifier":{"PortValue":41566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28834206-79c8-4b9a-8ef2-364b772b2fb5","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28834206-79c8-4b9a-8ef2-364b772b2fb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41566","PortSpecifier":{"PortValue":41566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018379,"nanos":302305663},"http":{"id":"28834206-79c8-4b9a-8ef2-364b772b2fb5","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"28834206-79c8-4b9a-8ef2-364b772b2fb5","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"28834206-79c8-4b9a-8ef2-364b772b2fb5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28834206-79c8-4b9a-8ef2-364b772b2fb5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28834206-79c8-4b9a-8ef2-364b772b2fb5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28834206-79c8-4b9a-8ef2-364b772b2fb5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28834206-79c8-4b9a-8ef2-364b772b2fb5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28834206-79c8-4b9a-8ef2-364b772b2fb5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28834206-79c8-4b9a-8ef2-364b772b2fb5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5578c1e-1d71-4f73-a303-657e3875b5b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15754","PortSpecifier":{"PortValue":15754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f5578c1e-1d71-4f73-a303-657e3875b5b6","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5578c1e-1d71-4f73-a303-657e3875b5b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15754","PortSpecifier":{"PortValue":15754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018379,"nanos":333763207},"http":{"id":"f5578c1e-1d71-4f73-a303-657e3875b5b6","method":"GET","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"f5578c1e-1d71-4f73-a303-657e3875b5b6","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f5578c1e-1d71-4f73-a303-657e3875b5b6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f5578c1e-1d71-4f73-a303-657e3875b5b6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f5578c1e-1d71-4f73-a303-657e3875b5b6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5578c1e-1d71-4f73-a303-657e3875b5b6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5578c1e-1d71-4f73-a303-657e3875b5b6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5578c1e-1d71-4f73-a303-657e3875b5b6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5578c1e-1d71-4f73-a303-657e3875b5b6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f505ffaa-0e76-47ef-bef1-0bc982f9bb69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:39486","PortSpecifier":{"PortValue":39486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f505ffaa-0e76-47ef-bef1-0bc982f9bb69","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f505ffaa-0e76-47ef-bef1-0bc982f9bb69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:39486","PortSpecifier":{"PortValue":39486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018379,"nanos":347342786},"http":{"id":"f505ffaa-0e76-47ef-bef1-0bc982f9bb69","method":"GET","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f505ffaa-0e76-47ef-bef1-0bc982f9bb69","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f505ffaa-0e76-47ef-bef1-0bc982f9bb69","config":{"Name":"kubernetes-tokens","Priority":1,"Conditions":{"Left":{"Selector":"request.url_path","Operator":5,"Value":".*/v1/models$"},"Right":{"Left":{"Selector":"request.headers.authorization","Operator":2,"Value":""},"Right":{"Left":null,"Right":null}}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f505ffaa-0e76-47ef-bef1-0bc982f9bb69","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f505ffaa-0e76-47ef-bef1-0bc982f9bb69","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f505ffaa-0e76-47ef-bef1-0bc982f9bb69","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}},"metadata":{"subscription-info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.48","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.35~maas-default-gateway-openshift-default-687ff6996-hqkpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.134.0.48","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"f505ffaa-0e76-47ef-bef1-0bc982f9bb69"},"host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","id":"f505ffaa-0e76-47ef-bef1-0bc982f9bb69","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":347342786,"seconds":1781018379},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.134.0.48:39486","port":39486}}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f505ffaa-0e76-47ef-bef1-0bc982f9bb69","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f505ffaa-0e76-47ef-bef1-0bc982f9bb69","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f505ffaa-0e76-47ef-bef1-0bc982f9bb69","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f505ffaa-0e76-47ef-bef1-0bc982f9bb69","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f505ffaa-0e76-47ef-bef1-0bc982f9bb69","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":""} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f505ffaa-0e76-47ef-bef1-0bc982f9bb69","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: apiKeyValidation"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f505ffaa-0e76-47ef-bef1-0bc982f9bb69","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f505ffaa-0e76-47ef-bef1-0bc982f9bb69","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"437dc302-c973-40cb-bd1f-de33ee032d95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39880","PortSpecifier":{"PortValue":39880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"437dc302-c973-40cb-bd1f-de33ee032d95","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"437dc302-c973-40cb-bd1f-de33ee032d95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39880","PortSpecifier":{"PortValue":39880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018379,"nanos":378882976},"http":{"id":"437dc302-c973-40cb-bd1f-de33ee032d95","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"437dc302-c973-40cb-bd1f-de33ee032d95","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FWKwaxmuBkU8Vbcw_FDG1NhsOIqkBzzQsxqMBZkTPFq753GUj5mlZBWWyedG"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"437dc302-c973-40cb-bd1f-de33ee032d95","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FWKwaxmuBkU8Vbcw_FDG1NhsOIqkBzzQsxqMBZkTPFq753GUj5mlZBWWyedG\"}"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"437dc302-c973-40cb-bd1f-de33ee032d95","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"437dc302-c973-40cb-bd1f-de33ee032d95","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"437dc302-c973-40cb-bd1f-de33ee032d95","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"437dc302-c973-40cb-bd1f-de33ee032d95","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"437dc302-c973-40cb-bd1f-de33ee032d95","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"437dc302-c973-40cb-bd1f-de33ee032d95","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"437dc302-c973-40cb-bd1f-de33ee032d95","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"437dc302-c973-40cb-bd1f-de33ee032d95","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"437dc302-c973-40cb-bd1f-de33ee032d95","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"437dc302-c973-40cb-bd1f-de33ee032d95","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80f98db2-6e4a-45c3-8edb-2d878b905a87","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"437dc302-c973-40cb-bd1f-de33ee032d95","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"437dc302-c973-40cb-bd1f-de33ee032d95","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7743593-9272-426d-8656-4cd9379ce7a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54424","PortSpecifier":{"PortValue":54424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7743593-9272-426d-8656-4cd9379ce7a3","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7743593-9272-426d-8656-4cd9379ce7a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54424","PortSpecifier":{"PortValue":54424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018379,"nanos":407904798},"http":{"id":"a7743593-9272-426d-8656-4cd9379ce7a3","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7743593-9272-426d-8656-4cd9379ce7a3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-invalid-key-12345"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a7743593-9272-426d-8656-4cd9379ce7a3","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-invalid-key-12345\"}"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a7743593-9272-426d-8656-4cd9379ce7a3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** key format","valid":false}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"a7743593-9272-426d-8656-4cd9379ce7a3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7743593-9272-426d-8656-4cd9379ce7a3","input":{"auth":{"identity":"Bearer **** key format","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a7743593-9272-426d-8656-4cd9379ce7a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7743593-9272-426d-8656-4cd9379ce7a3","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7743593-9272-426d-8656-4cd9379ce7a3","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a1ee4ff-b7e3-4980-8575-b325d33f2dee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34414","PortSpecifier":{"PortValue":34414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a1ee4ff-b7e3-4980-8575-b325d33f2dee","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a1ee4ff-b7e3-4980-8575-b325d33f2dee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34414","PortSpecifier":{"PortValue":34414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018379,"nanos":431555856},"http":{"id":"6a1ee4ff-b7e3-4980-8575-b325d33f2dee","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.35~maas-default-gateway-openshift-default-687ff6996-hqkpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"6a1ee4ff-b7e3-4980-8575-b325d33f2dee"},"path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"metadata_context":{}}} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a1ee4ff-b7e3-4980-8575-b325d33f2dee","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a1ee4ff-b7e3-4980-8575-b325d33f2dee","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92718230-0f83-4404-b266-006d8e76ce56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64374","PortSpecifier":{"PortValue":64374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92718230-0f83-4404-b266-006d8e76ce56","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92718230-0f83-4404-b266-006d8e76ce56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64374","PortSpecifier":{"PortValue":64374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018379,"nanos":451365292},"http":{"id":"92718230-0f83-4404-b266-006d8e76ce56","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"92718230-0f83-4404-b266-006d8e76ce56","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"92718230-0f83-4404-b266-006d8e76ce56","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92718230-0f83-4404-b266-006d8e76ce56","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92718230-0f83-4404-b266-006d8e76ce56","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92718230-0f83-4404-b266-006d8e76ce56","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92718230-0f83-4404-b266-006d8e76ce56","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92718230-0f83-4404-b266-006d8e76ce56","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92718230-0f83-4404-b266-006d8e76ce56","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"665995cf-0483-4e9a-aff0-c2ccc51a0a60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41580","PortSpecifier":{"PortValue":41580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"665995cf-0483-4e9a-aff0-c2ccc51a0a60","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"665995cf-0483-4e9a-aff0-c2ccc51a0a60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41580","PortSpecifier":{"PortValue":41580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018379,"nanos":483422265},"http":{"id":"665995cf-0483-4e9a-aff0-c2ccc51a0a60","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"665995cf-0483-4e9a-aff0-c2ccc51a0a60","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WGWZTAJeozGTIOOz_3IMsTQJRi3zHRJTg6HiLC82qwrH0rgXt0FsOjqBwURK"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"665995cf-0483-4e9a-aff0-c2ccc51a0a60","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WGWZTAJeozGTIOOz_3IMsTQJRi3zHRJTg6HiLC82qwrH0rgXt0FsOjqBwURK\"}"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"665995cf-0483-4e9a-aff0-c2ccc51a0a60","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"665995cf-0483-4e9a-aff0-c2ccc51a0a60","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"665995cf-0483-4e9a-aff0-c2ccc51a0a60","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"665995cf-0483-4e9a-aff0-c2ccc51a0a60","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"665995cf-0483-4e9a-aff0-c2ccc51a0a60","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"665995cf-0483-4e9a-aff0-c2ccc51a0a60","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"665995cf-0483-4e9a-aff0-c2ccc51a0a60","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"665995cf-0483-4e9a-aff0-c2ccc51a0a60","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"665995cf-0483-4e9a-aff0-c2ccc51a0a60","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"665995cf-0483-4e9a-aff0-c2ccc51a0a60","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3d0b39ae-55f6-40bc-b50f-8e68fbb477de","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"665995cf-0483-4e9a-aff0-c2ccc51a0a60","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"665995cf-0483-4e9a-aff0-c2ccc51a0a60","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53efff91-7866-45f3-9f94-293cd30ecc17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15768","PortSpecifier":{"PortValue":15768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53efff91-7866-45f3-9f94-293cd30ecc17","method":"DELETE","path":"/maas-api/v1/api-keys/3d0b39ae-55f6-40bc-b50f-8e68fbb477de","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53efff91-7866-45f3-9f94-293cd30ecc17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15768","PortSpecifier":{"PortValue":15768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018379,"nanos":510557851},"http":{"id":"53efff91-7866-45f3-9f94-293cd30ecc17","method":"DELETE","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/3d0b39ae-55f6-40bc-b50f-8e68fbb477de",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"53efff91-7866-45f3-9f94-293cd30ecc17","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"53efff91-7866-45f3-9f94-293cd30ecc17","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53efff91-7866-45f3-9f94-293cd30ecc17","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53efff91-7866-45f3-9f94-293cd30ecc17","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/3d0b39ae-55f6-40bc-b50f-8e68fbb477de",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53efff91-7866-45f3-9f94-293cd30ecc17","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53efff91-7866-45f3-9f94-293cd30ecc17","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53efff91-7866-45f3-9f94-293cd30ecc17","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53efff91-7866-45f3-9f94-293cd30ecc17","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fae8611-a254-47f5-b052-75f4933cbd6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39886","PortSpecifier":{"PortValue":39886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6fae8611-a254-47f5-b052-75f4933cbd6e","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fae8611-a254-47f5-b052-75f4933cbd6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39886","PortSpecifier":{"PortValue":39886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018381,"nanos":545303817},"http":{"id":"6fae8611-a254-47f5-b052-75f4933cbd6e","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6fae8611-a254-47f5-b052-75f4933cbd6e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WGWZTAJeozGTIOOz_3IMsTQJRi3zHRJTg6HiLC82qwrH0rgXt0FsOjqBwURK"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6fae8611-a254-47f5-b052-75f4933cbd6e","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WGWZTAJeozGTIOOz_3IMsTQJRi3zHRJTg6HiLC82qwrH0rgXt0FsOjqBwURK\"}"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6fae8611-a254-47f5-b052-75f4933cbd6e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"6fae8611-a254-47f5-b052-75f4933cbd6e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6fae8611-a254-47f5-b052-75f4933cbd6e","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"6fae8611-a254-47f5-b052-75f4933cbd6e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fae8611-a254-47f5-b052-75f4933cbd6e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fae8611-a254-47f5-b052-75f4933cbd6e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f782c6b9-cec2-457b-a520-6795072ffbe3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34426","PortSpecifier":{"PortValue":34426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f782c6b9-cec2-457b-a520-6795072ffbe3","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f782c6b9-cec2-457b-a520-6795072ffbe3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34426","PortSpecifier":{"PortValue":34426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018381,"nanos":573248765},"http":{"id":"f782c6b9-cec2-457b-a520-6795072ffbe3","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f782c6b9-cec2-457b-a520-6795072ffbe3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FWKwaxmuBkU8Vbcw_FDG1NhsOIqkBzzQsxqMBZkTPFq753GUj5mlZBWWyedG"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f782c6b9-cec2-457b-a520-6795072ffbe3","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FWKwaxmuBkU8Vbcw_FDG1NhsOIqkBzzQsxqMBZkTPFq753GUj5mlZBWWyedG\"}"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f782c6b9-cec2-457b-a520-6795072ffbe3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f782c6b9-cec2-457b-a520-6795072ffbe3","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f782c6b9-cec2-457b-a520-6795072ffbe3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f782c6b9-cec2-457b-a520-6795072ffbe3","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f782c6b9-cec2-457b-a520-6795072ffbe3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f782c6b9-cec2-457b-a520-6795072ffbe3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f782c6b9-cec2-457b-a520-6795072ffbe3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f782c6b9-cec2-457b-a520-6795072ffbe3","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f782c6b9-cec2-457b-a520-6795072ffbe3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f782c6b9-cec2-457b-a520-6795072ffbe3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80f98db2-6e4a-45c3-8edb-2d878b905a87","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f782c6b9-cec2-457b-a520-6795072ffbe3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f782c6b9-cec2-457b-a520-6795072ffbe3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"411e9d7e-030c-4197-89f4-a9ad35118bae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54436","PortSpecifier":{"PortValue":54436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"411e9d7e-030c-4197-89f4-a9ad35118bae","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"411e9d7e-030c-4197-89f4-a9ad35118bae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54436","PortSpecifier":{"PortValue":54436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018381,"nanos":601470837},"http":{"id":"411e9d7e-030c-4197-89f4-a9ad35118bae","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"411e9d7e-030c-4197-89f4-a9ad35118bae","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"411e9d7e-030c-4197-89f4-a9ad35118bae","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"411e9d7e-030c-4197-89f4-a9ad35118bae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"411e9d7e-030c-4197-89f4-a9ad35118bae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"411e9d7e-030c-4197-89f4-a9ad35118bae","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"411e9d7e-030c-4197-89f4-a9ad35118bae","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"411e9d7e-030c-4197-89f4-a9ad35118bae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"411e9d7e-030c-4197-89f4-a9ad35118bae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f04b1730-3162-4f1a-9758-76ee6d85226c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64388","PortSpecifier":{"PortValue":64388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f04b1730-3162-4f1a-9758-76ee6d85226c","method":"DELETE","path":"/maas-api/v1/api-keys/a6872e2d-6e5b-4ef4-93cd-d04967c46c1d","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f04b1730-3162-4f1a-9758-76ee6d85226c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64388","PortSpecifier":{"PortValue":64388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018381,"nanos":633522572},"http":{"id":"f04b1730-3162-4f1a-9758-76ee6d85226c","method":"DELETE","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/a6872e2d-6e5b-4ef4-93cd-d04967c46c1d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"f04b1730-3162-4f1a-9758-76ee6d85226c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f04b1730-3162-4f1a-9758-76ee6d85226c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f04b1730-3162-4f1a-9758-76ee6d85226c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f04b1730-3162-4f1a-9758-76ee6d85226c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/a6872e2d-6e5b-4ef4-93cd-d04967c46c1d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f04b1730-3162-4f1a-9758-76ee6d85226c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f04b1730-3162-4f1a-9758-76ee6d85226c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f04b1730-3162-4f1a-9758-76ee6d85226c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f04b1730-3162-4f1a-9758-76ee6d85226c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e487461-ed44-460e-b467-a639bc4ead8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41590","PortSpecifier":{"PortValue":41590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e487461-ed44-460e-b467-a639bc4ead8b","method":"DELETE","path":"/maas-api/v1/api-keys/a6872e2d-6e5b-4ef4-93cd-d04967c46c1d","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e487461-ed44-460e-b467-a639bc4ead8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41590","PortSpecifier":{"PortValue":41590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018381,"nanos":666650596},"http":{"id":"0e487461-ed44-460e-b467-a639bc4ead8b","method":"DELETE","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/a6872e2d-6e5b-4ef4-93cd-d04967c46c1d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"0e487461-ed44-460e-b467-a639bc4ead8b","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0e487461-ed44-460e-b467-a639bc4ead8b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e487461-ed44-460e-b467-a639bc4ead8b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e487461-ed44-460e-b467-a639bc4ead8b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/a6872e2d-6e5b-4ef4-93cd-d04967c46c1d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e487461-ed44-460e-b467-a639bc4ead8b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e487461-ed44-460e-b467-a639bc4ead8b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e487461-ed44-460e-b467-a639bc4ead8b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e487461-ed44-460e-b467-a639bc4ead8b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f036477d-7d06-40cf-b3e6-0a3273d14259","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54442","PortSpecifier":{"PortValue":54442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f036477d-7d06-40cf-b3e6-0a3273d14259","method":"DELETE","path":"/maas-api/v1/api-keys/nonexistent-uuid-12345","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f036477d-7d06-40cf-b3e6-0a3273d14259","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54442","PortSpecifier":{"PortValue":54442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018381,"nanos":706604529},"http":{"id":"f036477d-7d06-40cf-b3e6-0a3273d14259","method":"DELETE","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/nonexistent-uuid-12345",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"f036477d-7d06-40cf-b3e6-0a3273d14259","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f036477d-7d06-40cf-b3e6-0a3273d14259","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f036477d-7d06-40cf-b3e6-0a3273d14259","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f036477d-7d06-40cf-b3e6-0a3273d14259","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/nonexistent-uuid-12345",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f036477d-7d06-40cf-b3e6-0a3273d14259","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f036477d-7d06-40cf-b3e6-0a3273d14259","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f036477d-7d06-40cf-b3e6-0a3273d14259","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f036477d-7d06-40cf-b3e6-0a3273d14259","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78a1660c-575b-439e-b6ae-02a48403c692","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15782","PortSpecifier":{"PortValue":15782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78a1660c-575b-439e-b6ae-02a48403c692","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78a1660c-575b-439e-b6ae-02a48403c692","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15782","PortSpecifier":{"PortValue":15782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018381,"nanos":739399494},"http":{"id":"78a1660c-575b-439e-b6ae-02a48403c692","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"78a1660c-575b-439e-b6ae-02a48403c692","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"78a1660c-575b-439e-b6ae-02a48403c692","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78a1660c-575b-439e-b6ae-02a48403c692","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78a1660c-575b-439e-b6ae-02a48403c692","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78a1660c-575b-439e-b6ae-02a48403c692","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78a1660c-575b-439e-b6ae-02a48403c692","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78a1660c-575b-439e-b6ae-02a48403c692","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78a1660c-575b-439e-b6ae-02a48403c692","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87cfb221-ac3c-4410-80e5-8eb87dd14a01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64390","PortSpecifier":{"PortValue":64390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87cfb221-ac3c-4410-80e5-8eb87dd14a01","method":"DELETE","path":"/maas-api/v1/api-keys/03c1fb9f-e8dd-426c-ab12-8934ff5e66a8","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87cfb221-ac3c-4410-80e5-8eb87dd14a01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64390","PortSpecifier":{"PortValue":64390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018381,"nanos":774663247},"http":{"id":"87cfb221-ac3c-4410-80e5-8eb87dd14a01","method":"DELETE","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/03c1fb9f-e8dd-426c-ab12-8934ff5e66a8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"87cfb221-ac3c-4410-80e5-8eb87dd14a01","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87cfb221-ac3c-4410-80e5-8eb87dd14a01","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87cfb221-ac3c-4410-80e5-8eb87dd14a01","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87cfb221-ac3c-4410-80e5-8eb87dd14a01","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/03c1fb9f-e8dd-426c-ab12-8934ff5e66a8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87cfb221-ac3c-4410-80e5-8eb87dd14a01","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87cfb221-ac3c-4410-80e5-8eb87dd14a01","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87cfb221-ac3c-4410-80e5-8eb87dd14a01","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87cfb221-ac3c-4410-80e5-8eb87dd14a01","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1539a7ba-1f6d-9c68-83d5-a56265a0de62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39902","PortSpecifier":{"PortValue":39902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1539a7ba-1f6d-9c68-83d5-a56265a0de62","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1539a7ba-1f6d-9c68-83d5-a56265a0de62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39902","PortSpecifier":{"PortValue":39902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018381,"nanos":805904593},"http":{"id":"1539a7ba-1f6d-9c68-83d5-a56265a0de62","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"1539a7ba-1f6d-9c68-83d5-a56265a0de62","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1539a7ba-1f6d-9c68-83d5-a56265a0de62","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1539a7ba-1f6d-9c68-83d5-a56265a0de62","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1539a7ba-1f6d-9c68-83d5-a56265a0de62","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1539a7ba-1f6d-9c68-83d5-a56265a0de62","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1539a7ba-1f6d-9c68-83d5-a56265a0de62","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1539a7ba-1f6d-9c68-83d5-a56265a0de62","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1539a7ba-1f6d-9c68-83d5-a56265a0de62","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b177dffe-7a46-4e92-872c-e671ffe4c015","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34436","PortSpecifier":{"PortValue":34436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b177dffe-7a46-4e92-872c-e671ffe4c015","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b177dffe-7a46-4e92-872c-e671ffe4c015","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34436","PortSpecifier":{"PortValue":34436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018381,"nanos":841581895},"http":{"id":"b177dffe-7a46-4e92-872c-e671ffe4c015","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b177dffe-7a46-4e92-872c-e671ffe4c015","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KTwRFmilQ5QUdvGY_TVGQOm6UTjHuluuH0ZNYbUagY5dffzd194reT2C81um"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b177dffe-7a46-4e92-872c-e671ffe4c015","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KTwRFmilQ5QUdvGY_TVGQOm6UTjHuluuH0ZNYbUagY5dffzd194reT2C81um\"}"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b177dffe-7a46-4e92-872c-e671ffe4c015","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"b177dffe-7a46-4e92-872c-e671ffe4c015","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b177dffe-7a46-4e92-872c-e671ffe4c015","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"b177dffe-7a46-4e92-872c-e671ffe4c015","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b177dffe-7a46-4e92-872c-e671ffe4c015","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b177dffe-7a46-4e92-872c-e671ffe4c015","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4729c65a-265f-9e98-90df-a277d4af7447","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41592","PortSpecifier":{"PortValue":41592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4729c65a-265f-9e98-90df-a277d4af7447","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4729c65a-265f-9e98-90df-a277d4af7447","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41592","PortSpecifier":{"PortValue":41592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018381,"nanos":864536660},"http":{"id":"4729c65a-265f-9e98-90df-a277d4af7447","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4729c65a-265f-9e98-90df-a277d4af7447","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YVW3wf89hmbm4U0J_FDe2KmdcNg5MPDPunRzE4h2ptXcVFd2Kyy2o7K4bqXU"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4729c65a-265f-9e98-90df-a277d4af7447","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YVW3wf89hmbm4U0J_FDe2KmdcNg5MPDPunRzE4h2ptXcVFd2Kyy2o7K4bqXU\"}"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4729c65a-265f-9e98-90df-a277d4af7447","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4729c65a-265f-9e98-90df-a277d4af7447","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4729c65a-265f-9e98-90df-a277d4af7447","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4729c65a-265f-9e98-90df-a277d4af7447","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4729c65a-265f-9e98-90df-a277d4af7447","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4729c65a-265f-9e98-90df-a277d4af7447","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4729c65a-265f-9e98-90df-a277d4af7447","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4729c65a-265f-9e98-90df-a277d4af7447","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4729c65a-265f-9e98-90df-a277d4af7447","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4729c65a-265f-9e98-90df-a277d4af7447","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d1f22872-daf2-4e1b-910e-86f5e55023aa","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4729c65a-265f-9e98-90df-a277d4af7447","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4729c65a-265f-9e98-90df-a277d4af7447","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6d5bf97-ed2f-4229-9dd8-7858a1104590","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54450","PortSpecifier":{"PortValue":54450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6d5bf97-ed2f-4229-9dd8-7858a1104590","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6d5bf97-ed2f-4229-9dd8-7858a1104590","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54450","PortSpecifier":{"PortValue":54450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018381,"nanos":905468849},"http":{"id":"c6d5bf97-ed2f-4229-9dd8-7858a1104590","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c6d5bf97-ed2f-4229-9dd8-7858a1104590","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c6d5bf97-ed2f-4229-9dd8-7858a1104590","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6d5bf97-ed2f-4229-9dd8-7858a1104590","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6d5bf97-ed2f-4229-9dd8-7858a1104590","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6d5bf97-ed2f-4229-9dd8-7858a1104590","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6d5bf97-ed2f-4229-9dd8-7858a1104590","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6d5bf97-ed2f-4229-9dd8-7858a1104590","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6d5bf97-ed2f-4229-9dd8-7858a1104590","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c94045c-7785-4e33-a3cf-82b635044eeb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64402","PortSpecifier":{"PortValue":64402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c94045c-7785-4e33-a3cf-82b635044eeb","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c94045c-7785-4e33-a3cf-82b635044eeb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64402","PortSpecifier":{"PortValue":64402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018381,"nanos":950350583},"http":{"id":"3c94045c-7785-4e33-a3cf-82b635044eeb","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"3c94045c-7785-4e33-a3cf-82b635044eeb","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3c94045c-7785-4e33-a3cf-82b635044eeb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c94045c-7785-4e33-a3cf-82b635044eeb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c94045c-7785-4e33-a3cf-82b635044eeb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c94045c-7785-4e33-a3cf-82b635044eeb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c94045c-7785-4e33-a3cf-82b635044eeb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c94045c-7785-4e33-a3cf-82b635044eeb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c94045c-7785-4e33-a3cf-82b635044eeb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9f3c225-e2dc-4543-a30a-e27db7a3fc7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41608","PortSpecifier":{"PortValue":41608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9f3c225-e2dc-4543-a30a-e27db7a3fc7a","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9f3c225-e2dc-4543-a30a-e27db7a3fc7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41608","PortSpecifier":{"PortValue":41608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018381,"nanos":991622954},"http":{"id":"c9f3c225-e2dc-4543-a30a-e27db7a3fc7a","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c9f3c225-e2dc-4543-a30a-e27db7a3fc7a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c9f3c225-e2dc-4543-a30a-e27db7a3fc7a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9f3c225-e2dc-4543-a30a-e27db7a3fc7a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9f3c225-e2dc-4543-a30a-e27db7a3fc7a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9f3c225-e2dc-4543-a30a-e27db7a3fc7a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9f3c225-e2dc-4543-a30a-e27db7a3fc7a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9f3c225-e2dc-4543-a30a-e27db7a3fc7a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9f3c225-e2dc-4543-a30a-e27db7a3fc7a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63c92209-09af-4f89-a1f4-4fae771db807","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15792","PortSpecifier":{"PortValue":15792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63c92209-09af-4f89-a1f4-4fae771db807","method":"DELETE","path":"/maas-api/v1/api-keys/a5cccc23-3d22-4b3f-b9a8-1a1162cd134d","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63c92209-09af-4f89-a1f4-4fae771db807","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15792","PortSpecifier":{"PortValue":15792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018382,"nanos":31345737},"http":{"id":"63c92209-09af-4f89-a1f4-4fae771db807","method":"DELETE","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/a5cccc23-3d22-4b3f-b9a8-1a1162cd134d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"63c92209-09af-4f89-a1f4-4fae771db807","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"63c92209-09af-4f89-a1f4-4fae771db807","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63c92209-09af-4f89-a1f4-4fae771db807","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63c92209-09af-4f89-a1f4-4fae771db807","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/a5cccc23-3d22-4b3f-b9a8-1a1162cd134d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63c92209-09af-4f89-a1f4-4fae771db807","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63c92209-09af-4f89-a1f4-4fae771db807","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63c92209-09af-4f89-a1f4-4fae771db807","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63c92209-09af-4f89-a1f4-4fae771db807","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a032faad-23e9-47e5-8451-da1c4f61340c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39904","PortSpecifier":{"PortValue":39904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a032faad-23e9-47e5-8451-da1c4f61340c","method":"DELETE","path":"/maas-api/v1/api-keys/0d60a5fc-ff43-43f9-8e2a-64e2599cdee9","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a032faad-23e9-47e5-8451-da1c4f61340c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39904","PortSpecifier":{"PortValue":39904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018382,"nanos":71706497},"http":{"id":"a032faad-23e9-47e5-8451-da1c4f61340c","method":"DELETE","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/0d60a5fc-ff43-43f9-8e2a-64e2599cdee9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"a032faad-23e9-47e5-8451-da1c4f61340c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a032faad-23e9-47e5-8451-da1c4f61340c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a032faad-23e9-47e5-8451-da1c4f61340c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a032faad-23e9-47e5-8451-da1c4f61340c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/0d60a5fc-ff43-43f9-8e2a-64e2599cdee9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a032faad-23e9-47e5-8451-da1c4f61340c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a032faad-23e9-47e5-8451-da1c4f61340c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a032faad-23e9-47e5-8451-da1c4f61340c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a032faad-23e9-47e5-8451-da1c4f61340c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4edcae1-bc5f-4f09-9cc0-182d5118455e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34450","PortSpecifier":{"PortValue":34450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4edcae1-bc5f-4f09-9cc0-182d5118455e","method":"DELETE","path":"/maas-api/v1/api-keys/ece83a3f-bebf-4b46-a4ef-1c435a622a5b","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4edcae1-bc5f-4f09-9cc0-182d5118455e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34450","PortSpecifier":{"PortValue":34450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018382,"nanos":111469544},"http":{"id":"c4edcae1-bc5f-4f09-9cc0-182d5118455e","method":"DELETE","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/ece83a3f-bebf-4b46-a4ef-1c435a622a5b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c4edcae1-bc5f-4f09-9cc0-182d5118455e","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4edcae1-bc5f-4f09-9cc0-182d5118455e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4edcae1-bc5f-4f09-9cc0-182d5118455e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4edcae1-bc5f-4f09-9cc0-182d5118455e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/ece83a3f-bebf-4b46-a4ef-1c435a622a5b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4edcae1-bc5f-4f09-9cc0-182d5118455e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4edcae1-bc5f-4f09-9cc0-182d5118455e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4edcae1-bc5f-4f09-9cc0-182d5118455e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4edcae1-bc5f-4f09-9cc0-182d5118455e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61fd1e3f-4838-4c76-bc7f-5e04e93aa42f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15796","PortSpecifier":{"PortValue":15796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61fd1e3f-4838-4c76-bc7f-5e04e93aa42f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61fd1e3f-4838-4c76-bc7f-5e04e93aa42f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15796","PortSpecifier":{"PortValue":15796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018382,"nanos":151123357},"http":{"id":"61fd1e3f-4838-4c76-bc7f-5e04e93aa42f","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"61fd1e3f-4838-4c76-bc7f-5e04e93aa42f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"61fd1e3f-4838-4c76-bc7f-5e04e93aa42f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61fd1e3f-4838-4c76-bc7f-5e04e93aa42f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61fd1e3f-4838-4c76-bc7f-5e04e93aa42f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61fd1e3f-4838-4c76-bc7f-5e04e93aa42f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61fd1e3f-4838-4c76-bc7f-5e04e93aa42f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61fd1e3f-4838-4c76-bc7f-5e04e93aa42f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61fd1e3f-4838-4c76-bc7f-5e04e93aa42f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"036908e6-1301-425e-8e2a-a3b228b3b7b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54466","PortSpecifier":{"PortValue":54466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"036908e6-1301-425e-8e2a-a3b228b3b7b1","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"036908e6-1301-425e-8e2a-a3b228b3b7b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54466","PortSpecifier":{"PortValue":54466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018382,"nanos":182452940},"http":{"id":"036908e6-1301-425e-8e2a-a3b228b3b7b1","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"036908e6-1301-425e-8e2a-a3b228b3b7b1","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"036908e6-1301-425e-8e2a-a3b228b3b7b1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"036908e6-1301-425e-8e2a-a3b228b3b7b1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"036908e6-1301-425e-8e2a-a3b228b3b7b1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"036908e6-1301-425e-8e2a-a3b228b3b7b1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"036908e6-1301-425e-8e2a-a3b228b3b7b1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"036908e6-1301-425e-8e2a-a3b228b3b7b1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"036908e6-1301-425e-8e2a-a3b228b3b7b1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f102969-be35-40c9-b9db-3b887b85b3c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39906","PortSpecifier":{"PortValue":39906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f102969-be35-40c9-b9db-3b887b85b3c7","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f102969-be35-40c9-b9db-3b887b85b3c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39906","PortSpecifier":{"PortValue":39906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018382,"nanos":213291657},"http":{"id":"1f102969-be35-40c9-b9db-3b887b85b3c7","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"1f102969-be35-40c9-b9db-3b887b85b3c7","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1f102969-be35-40c9-b9db-3b887b85b3c7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f102969-be35-40c9-b9db-3b887b85b3c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f102969-be35-40c9-b9db-3b887b85b3c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f102969-be35-40c9-b9db-3b887b85b3c7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f102969-be35-40c9-b9db-3b887b85b3c7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f102969-be35-40c9-b9db-3b887b85b3c7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f102969-be35-40c9-b9db-3b887b85b3c7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b92405e-b784-4727-bce1-938ad5c1fef9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64412","PortSpecifier":{"PortValue":64412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b92405e-b784-4727-bce1-938ad5c1fef9","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b92405e-b784-4727-bce1-938ad5c1fef9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64412","PortSpecifier":{"PortValue":64412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018382,"nanos":246793091},"http":{"id":"3b92405e-b784-4727-bce1-938ad5c1fef9","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b92405e-b784-4727-bce1-938ad5c1fef9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sFdb6nYf74XroJUh_TyDac77kSsaXOhuVvCnRK6tr7ANJ5MBuKREbTCmzRcu"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b92405e-b784-4727-bce1-938ad5c1fef9","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sFdb6nYf74XroJUh_TyDac77kSsaXOhuVvCnRK6tr7ANJ5MBuKREbTCmzRcu\"}"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b92405e-b784-4727-bce1-938ad5c1fef9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b92405e-b784-4727-bce1-938ad5c1fef9","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b92405e-b784-4727-bce1-938ad5c1fef9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b92405e-b784-4727-bce1-938ad5c1fef9","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b92405e-b784-4727-bce1-938ad5c1fef9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b92405e-b784-4727-bce1-938ad5c1fef9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b92405e-b784-4727-bce1-938ad5c1fef9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b92405e-b784-4727-bce1-938ad5c1fef9","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b92405e-b784-4727-bce1-938ad5c1fef9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b92405e-b784-4727-bce1-938ad5c1fef9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"98dad8b4-d9b0-4fa3-a390-3880966df067","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b92405e-b784-4727-bce1-938ad5c1fef9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b92405e-b784-4727-bce1-938ad5c1fef9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47026514-e7f8-4cf9-8638-d267dd761d5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41620","PortSpecifier":{"PortValue":41620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47026514-e7f8-4cf9-8638-d267dd761d5f","method":"DELETE","path":"/maas-api/v1/api-keys/98dad8b4-d9b0-4fa3-a390-3880966df067","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47026514-e7f8-4cf9-8638-d267dd761d5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41620","PortSpecifier":{"PortValue":41620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018382,"nanos":281382540},"http":{"id":"47026514-e7f8-4cf9-8638-d267dd761d5f","method":"DELETE","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/98dad8b4-d9b0-4fa3-a390-3880966df067",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"47026514-e7f8-4cf9-8638-d267dd761d5f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"47026514-e7f8-4cf9-8638-d267dd761d5f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47026514-e7f8-4cf9-8638-d267dd761d5f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47026514-e7f8-4cf9-8638-d267dd761d5f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/98dad8b4-d9b0-4fa3-a390-3880966df067",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47026514-e7f8-4cf9-8638-d267dd761d5f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47026514-e7f8-4cf9-8638-d267dd761d5f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47026514-e7f8-4cf9-8638-d267dd761d5f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47026514-e7f8-4cf9-8638-d267dd761d5f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5542e5c7-eff5-42fd-b51b-84c757f5f27e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54480","PortSpecifier":{"PortValue":54480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5542e5c7-eff5-42fd-b51b-84c757f5f27e","method":"DELETE","path":"/maas-api/v1/api-keys/d01f85ab-44d5-44f6-b5f2-ccf0da2ae21a","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5542e5c7-eff5-42fd-b51b-84c757f5f27e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54480","PortSpecifier":{"PortValue":54480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018382,"nanos":319981792},"http":{"id":"5542e5c7-eff5-42fd-b51b-84c757f5f27e","method":"DELETE","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/d01f85ab-44d5-44f6-b5f2-ccf0da2ae21a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"5542e5c7-eff5-42fd-b51b-84c757f5f27e","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5542e5c7-eff5-42fd-b51b-84c757f5f27e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5542e5c7-eff5-42fd-b51b-84c757f5f27e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5542e5c7-eff5-42fd-b51b-84c757f5f27e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/d01f85ab-44d5-44f6-b5f2-ccf0da2ae21a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5542e5c7-eff5-42fd-b51b-84c757f5f27e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5542e5c7-eff5-42fd-b51b-84c757f5f27e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5542e5c7-eff5-42fd-b51b-84c757f5f27e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5542e5c7-eff5-42fd-b51b-84c757f5f27e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd486331-fb71-4541-9707-05144c01a675","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64420","PortSpecifier":{"PortValue":64420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd486331-fb71-4541-9707-05144c01a675","method":"DELETE","path":"/maas-api/v1/api-keys/5091699e-35a1-4e54-af84-89edde88f8bf","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd486331-fb71-4541-9707-05144c01a675","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64420","PortSpecifier":{"PortValue":64420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018382,"nanos":354322358},"http":{"id":"cd486331-fb71-4541-9707-05144c01a675","method":"DELETE","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/5091699e-35a1-4e54-af84-89edde88f8bf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"cd486331-fb71-4541-9707-05144c01a675","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd486331-fb71-4541-9707-05144c01a675","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd486331-fb71-4541-9707-05144c01a675","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd486331-fb71-4541-9707-05144c01a675","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/5091699e-35a1-4e54-af84-89edde88f8bf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd486331-fb71-4541-9707-05144c01a675","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd486331-fb71-4541-9707-05144c01a675","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd486331-fb71-4541-9707-05144c01a675","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd486331-fb71-4541-9707-05144c01a675","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79df4829-d237-48ca-8232-c2138e0b0398","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41628","PortSpecifier":{"PortValue":41628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79df4829-d237-48ca-8232-c2138e0b0398","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79df4829-d237-48ca-8232-c2138e0b0398","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41628","PortSpecifier":{"PortValue":41628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018382,"nanos":386470248},"http":{"id":"79df4829-d237-48ca-8232-c2138e0b0398","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79df4829-d237-48ca-8232-c2138e0b0398","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sFdb6nYf74XroJUh_TyDac77kSsaXOhuVvCnRK6tr7ANJ5MBuKREbTCmzRcu"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79df4829-d237-48ca-8232-c2138e0b0398","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sFdb6nYf74XroJUh_TyDac77kSsaXOhuVvCnRK6tr7ANJ5MBuKREbTCmzRcu\"}"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79df4829-d237-48ca-8232-c2138e0b0398","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"79df4829-d237-48ca-8232-c2138e0b0398","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79df4829-d237-48ca-8232-c2138e0b0398","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"79df4829-d237-48ca-8232-c2138e0b0398","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79df4829-d237-48ca-8232-c2138e0b0398","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79df4829-d237-48ca-8232-c2138e0b0398","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d70c412e-afee-4f12-99d9-d98bd9161e38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34466","PortSpecifier":{"PortValue":34466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d70c412e-afee-4f12-99d9-d98bd9161e38","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d70c412e-afee-4f12-99d9-d98bd9161e38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34466","PortSpecifier":{"PortValue":34466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018382,"nanos":408374239},"http":{"id":"d70c412e-afee-4f12-99d9-d98bd9161e38","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d70c412e-afee-4f12-99d9-d98bd9161e38","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1V4liUWbURcwaXMWY_AlMmxYaXoXLE2tw0NQA2unbN6LsHGhGCbFpAAhaRQRM"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d70c412e-afee-4f12-99d9-d98bd9161e38","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1V4liUWbURcwaXMWY_AlMmxYaXoXLE2tw0NQA2unbN6LsHGhGCbFpAAhaRQRM\"}"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d70c412e-afee-4f12-99d9-d98bd9161e38","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"d70c412e-afee-4f12-99d9-d98bd9161e38","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d70c412e-afee-4f12-99d9-d98bd9161e38","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"d70c412e-afee-4f12-99d9-d98bd9161e38","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d70c412e-afee-4f12-99d9-d98bd9161e38","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d70c412e-afee-4f12-99d9-d98bd9161e38","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d8fbf9f-d6e7-413f-9495-96b08173c89c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54492","PortSpecifier":{"PortValue":54492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d8fbf9f-d6e7-413f-9495-96b08173c89c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d8fbf9f-d6e7-413f-9495-96b08173c89c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54492","PortSpecifier":{"PortValue":54492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018382,"nanos":437267315},"http":{"id":"8d8fbf9f-d6e7-413f-9495-96b08173c89c","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d8fbf9f-d6e7-413f-9495-96b08173c89c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-m88t7vJEcQVVYo3x_70vMkNMDx0Ogpy0u2GJmp5FgGMDHXTwlRlCgLH6PpK0"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d8fbf9f-d6e7-413f-9495-96b08173c89c","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-m88t7vJEcQVVYo3x_70vMkNMDx0Ogpy0u2GJmp5FgGMDHXTwlRlCgLH6PpK0\"}"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d8fbf9f-d6e7-413f-9495-96b08173c89c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"8d8fbf9f-d6e7-413f-9495-96b08173c89c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d8fbf9f-d6e7-413f-9495-96b08173c89c","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"8d8fbf9f-d6e7-413f-9495-96b08173c89c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d8fbf9f-d6e7-413f-9495-96b08173c89c","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d8fbf9f-d6e7-413f-9495-96b08173c89c","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10c9f54f-f82c-4477-a282-0de19bec3ded","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64432","PortSpecifier":{"PortValue":64432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"10c9f54f-f82c-4477-a282-0de19bec3ded","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10c9f54f-f82c-4477-a282-0de19bec3ded","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64432","PortSpecifier":{"PortValue":64432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018382,"nanos":688407101},"http":{"id":"10c9f54f-f82c-4477-a282-0de19bec3ded","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"10c9f54f-f82c-4477-a282-0de19bec3ded","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"10c9f54f-f82c-4477-a282-0de19bec3ded","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"10c9f54f-f82c-4477-a282-0de19bec3ded","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"10c9f54f-f82c-4477-a282-0de19bec3ded","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10c9f54f-f82c-4477-a282-0de19bec3ded","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10c9f54f-f82c-4477-a282-0de19bec3ded","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10c9f54f-f82c-4477-a282-0de19bec3ded","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10c9f54f-f82c-4477-a282-0de19bec3ded","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d07b4565-3d7b-46c4-92b1-73769d1a186f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41636","PortSpecifier":{"PortValue":41636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d07b4565-3d7b-46c4-92b1-73769d1a186f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d07b4565-3d7b-46c4-92b1-73769d1a186f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41636","PortSpecifier":{"PortValue":41636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018382,"nanos":722148347},"http":{"id":"d07b4565-3d7b-46c4-92b1-73769d1a186f","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"d07b4565-3d7b-46c4-92b1-73769d1a186f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d07b4565-3d7b-46c4-92b1-73769d1a186f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d07b4565-3d7b-46c4-92b1-73769d1a186f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d07b4565-3d7b-46c4-92b1-73769d1a186f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d07b4565-3d7b-46c4-92b1-73769d1a186f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d07b4565-3d7b-46c4-92b1-73769d1a186f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d07b4565-3d7b-46c4-92b1-73769d1a186f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d07b4565-3d7b-46c4-92b1-73769d1a186f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98defa0d-f580-45d9-8644-f136c3e0d6ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15804","PortSpecifier":{"PortValue":15804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98defa0d-f580-45d9-8644-f136c3e0d6ce","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98defa0d-f580-45d9-8644-f136c3e0d6ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15804","PortSpecifier":{"PortValue":15804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018382,"nanos":756583839},"http":{"id":"98defa0d-f580-45d9-8644-f136c3e0d6ce","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"98defa0d-f580-45d9-8644-f136c3e0d6ce","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"98defa0d-f580-45d9-8644-f136c3e0d6ce","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98defa0d-f580-45d9-8644-f136c3e0d6ce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98defa0d-f580-45d9-8644-f136c3e0d6ce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98defa0d-f580-45d9-8644-f136c3e0d6ce","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98defa0d-f580-45d9-8644-f136c3e0d6ce","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98defa0d-f580-45d9-8644-f136c3e0d6ce","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98defa0d-f580-45d9-8644-f136c3e0d6ce","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8af4b72-0092-4992-bf7e-228ff3a75fe8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54500","PortSpecifier":{"PortValue":54500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8af4b72-0092-4992-bf7e-228ff3a75fe8","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8af4b72-0092-4992-bf7e-228ff3a75fe8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54500","PortSpecifier":{"PortValue":54500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018382,"nanos":790489151},"http":{"id":"c8af4b72-0092-4992-bf7e-228ff3a75fe8","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c8af4b72-0092-4992-bf7e-228ff3a75fe8","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c8af4b72-0092-4992-bf7e-228ff3a75fe8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8af4b72-0092-4992-bf7e-228ff3a75fe8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8af4b72-0092-4992-bf7e-228ff3a75fe8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8af4b72-0092-4992-bf7e-228ff3a75fe8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8af4b72-0092-4992-bf7e-228ff3a75fe8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8af4b72-0092-4992-bf7e-228ff3a75fe8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8af4b72-0092-4992-bf7e-228ff3a75fe8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:19:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1340ff67-f1db-4485-8f5a-60e96f13f31b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:1736","PortSpecifier":{"PortValue":1736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1340ff67-f1db-4485-8f5a-60e96f13f31b","method":"GET","path":"/maas-api/v1/api-keys/f09c4bae-b797-40d1-94f2-0437e5f7adbc","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1340ff67-f1db-4485-8f5a-60e96f13f31b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:1736","PortSpecifier":{"PortValue":1736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018383,"nanos":259660862},"http":{"id":"1340ff67-f1db-4485-8f5a-60e96f13f31b","method":"GET","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f09c4bae-b797-40d1-94f2-0437e5f7adbc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"1340ff67-f1db-4485-8f5a-60e96f13f31b","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1340ff67-f1db-4485-8f5a-60e96f13f31b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1340ff67-f1db-4485-8f5a-60e96f13f31b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1340ff67-f1db-4485-8f5a-60e96f13f31b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f09c4bae-b797-40d1-94f2-0437e5f7adbc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1340ff67-f1db-4485-8f5a-60e96f13f31b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:19:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1340ff67-f1db-4485-8f5a-60e96f13f31b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1340ff67-f1db-4485-8f5a-60e96f13f31b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1340ff67-f1db-4485-8f5a-60e96f13f31b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T15:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"error","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cc79e55-318b-4eee-97cf-daad8a3ab4ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:28690","PortSpecifier":{"PortValue":28690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4cc79e55-318b-4eee-97cf-daad8a3ab4ff","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:19:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cc79e55-318b-4eee-97cf-daad8a3ab4ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:28690","PortSpecifier":{"PortValue":28690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018386,"nanos":176558470},"http":{"id":"4cc79e55-318b-4eee-97cf-daad8a3ab4ff","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"4cc79e55-318b-4eee-97cf-daad8a3ab4ff","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:19:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4cc79e55-318b-4eee-97cf-daad8a3ab4ff","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:19:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4cc79e55-318b-4eee-97cf-daad8a3ab4ff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-apikey-active-sa","uid":"9433dc8a-7761-4acb-a61a-635106036748","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a31079e6-3e97-4e16-8754-fc2fe933f3ee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:19:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4cc79e55-318b-4eee-97cf-daad8a3ab4ff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a31079e6-3e97-4e16-8754-fc2fe933f3ee"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"9433dc8a-7761-4acb-a61a-635106036748","username":"system:serviceaccount:llm:e2e-apikey-active-sa"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:19:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cc79e55-318b-4eee-97cf-daad8a3ab4ff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-apikey-active-sa"} {"level":"debug","ts":"2026-06-09T15:19:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cc79e55-318b-4eee-97cf-daad8a3ab4ff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:19:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cc79e55-318b-4eee-97cf-daad8a3ab4ff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cc79e55-318b-4eee-97cf-daad8a3ab4ff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T15:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"error","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:19:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:19:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:19:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:19:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:19:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:20:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d526f10-d718-4b9a-9818-e0a322c98a6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:60198","PortSpecifier":{"PortValue":60198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d526f10-d718-4b9a-9818-e0a322c98a6f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:20:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d526f10-d718-4b9a-9818-e0a322c98a6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:60198","PortSpecifier":{"PortValue":60198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018405,"nanos":350015686},"http":{"id":"4d526f10-d718-4b9a-9818-e0a322c98a6f","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:20:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"4d526f10-d718-4b9a-9818-e0a322c98a6f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:20:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4d526f10-d718-4b9a-9818-e0a322c98a6f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:20:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d526f10-d718-4b9a-9818-e0a322c98a6f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-apikey-degraded-sa","uid":"1dbcb43e-9068-4d93-af1b-a5a631c17ace","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d91f98a3-c140-41fe-8112-49a61f2adbb2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:20:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d526f10-d718-4b9a-9818-e0a322c98a6f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d91f98a3-c140-41fe-8112-49a61f2adbb2"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"1dbcb43e-9068-4d93-af1b-a5a631c17ace","username":"system:serviceaccount:llm:e2e-apikey-degraded-sa"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:20:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d526f10-d718-4b9a-9818-e0a322c98a6f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-apikey-degraded-sa"} {"level":"debug","ts":"2026-06-09T15:20:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d526f10-d718-4b9a-9818-e0a322c98a6f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:20:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d526f10-d718-4b9a-9818-e0a322c98a6f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:20:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d526f10-d718-4b9a-9818-e0a322c98a6f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T15:20:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T15:20:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T15:20:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:20:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T15:20:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:20:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81f53738-3002-4f80-a12e-ba27df5f5a66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23480","PortSpecifier":{"PortValue":23480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81f53738-3002-4f80-a12e-ba27df5f5a66","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:20:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81f53738-3002-4f80-a12e-ba27df5f5a66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23480","PortSpecifier":{"PortValue":23480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018424,"nanos":708392106},"http":{"id":"81f53738-3002-4f80-a12e-ba27df5f5a66","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:20:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"81f53738-3002-4f80-a12e-ba27df5f5a66","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:20:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"81f53738-3002-4f80-a12e-ba27df5f5a66","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:20:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81f53738-3002-4f80-a12e-ba27df5f5a66","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-apikey-failed-sa","uid":"81ac8778-73a1-4889-b4d8-61c908a3efc3","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ffecd0ad-47d6-442f-8438-05f1828b33a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81f53738-3002-4f80-a12e-ba27df5f5a66","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ffecd0ad-47d6-442f-8438-05f1828b33a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"81ac8778-73a1-4889-b4d8-61c908a3efc3","username":"system:serviceaccount:llm:e2e-apikey-failed-sa"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81f53738-3002-4f80-a12e-ba27df5f5a66","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-apikey-failed-sa"} {"level":"debug","ts":"2026-06-09T15:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81f53738-3002-4f80-a12e-ba27df5f5a66","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:20:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81f53738-3002-4f80-a12e-ba27df5f5a66","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:20:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81f53738-3002-4f80-a12e-ba27df5f5a66","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:20:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f66324fc-84fb-4578-8a0a-8af3a00dd3aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:6874","PortSpecifier":{"PortValue":6874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f66324fc-84fb-4578-8a0a-8af3a00dd3aa","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:20:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f66324fc-84fb-4578-8a0a-8af3a00dd3aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:6874","PortSpecifier":{"PortValue":6874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018444,"nanos":37527167},"http":{"id":"f66324fc-84fb-4578-8a0a-8af3a00dd3aa","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:20:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"f66324fc-84fb-4578-8a0a-8af3a00dd3aa","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:20:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f66324fc-84fb-4578-8a0a-8af3a00dd3aa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:20:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f66324fc-84fb-4578-8a0a-8af3a00dd3aa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-apikey-pending-sa","uid":"0f6dafb4-b354-4fd7-8db4-7cc4b78a10a8","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2515aa0e-9dca-4ce6-b46c-5606852ebb5c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f66324fc-84fb-4578-8a0a-8af3a00dd3aa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2515aa0e-9dca-4ce6-b46c-5606852ebb5c"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"0f6dafb4-b354-4fd7-8db4-7cc4b78a10a8","username":"system:serviceaccount:llm:e2e-apikey-pending-sa"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f66324fc-84fb-4578-8a0a-8af3a00dd3aa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-apikey-pending-sa"} {"level":"debug","ts":"2026-06-09T15:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f66324fc-84fb-4578-8a0a-8af3a00dd3aa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:20:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f66324fc-84fb-4578-8a0a-8af3a00dd3aa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:20:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f66324fc-84fb-4578-8a0a-8af3a00dd3aa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:20:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0f135a6-45e1-4d21-9f41-c07f2a267fa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:26922","PortSpecifier":{"PortValue":26922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0f135a6-45e1-4d21-9f41-c07f2a267fa4","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:20:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0f135a6-45e1-4d21-9f41-c07f2a267fa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:26922","PortSpecifier":{"PortValue":26922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018454,"nanos":829959945},"http":{"id":"a0f135a6-45e1-4d21-9f41-c07f2a267fa4","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:20:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"a0f135a6-45e1-4d21-9f41-c07f2a267fa4","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:20:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a0f135a6-45e1-4d21-9f41-c07f2a267fa4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:20:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0f135a6-45e1-4d21-9f41-c07f2a267fa4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-apikey-unreconciled-sa","uid":"df591b69-f2ff-4f79-b794-e16f7efe107f","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8488e639-839c-4ea4-bf2d-ab9f81a99337"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:20:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0f135a6-45e1-4d21-9f41-c07f2a267fa4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8488e639-839c-4ea4-bf2d-ab9f81a99337"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"df591b69-f2ff-4f79-b794-e16f7efe107f","username":"system:serviceaccount:llm:e2e-apikey-unreconciled-sa"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:20:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0f135a6-45e1-4d21-9f41-c07f2a267fa4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-apikey-unreconciled-sa"} {"level":"debug","ts":"2026-06-09T15:20:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0f135a6-45e1-4d21-9f41-c07f2a267fa4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:20:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0f135a6-45e1-4d21-9f41-c07f2a267fa4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:20:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0f135a6-45e1-4d21-9f41-c07f2a267fa4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"317db1ae-8a55-4010-8b6f-d40baf1fbbe3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42710","PortSpecifier":{"PortValue":42710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"317db1ae-8a55-4010-8b6f-d40baf1fbbe3","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"317db1ae-8a55-4010-8b6f-d40baf1fbbe3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42710","PortSpecifier":{"PortValue":42710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018476,"nanos":775777319},"http":{"id":"317db1ae-8a55-4010-8b6f-d40baf1fbbe3","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"317db1ae-8a55-4010-8b6f-d40baf1fbbe3","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"317db1ae-8a55-4010-8b6f-d40baf1fbbe3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"317db1ae-8a55-4010-8b6f-d40baf1fbbe3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-filter-sa-d5ef3177","uid":"f73e1cc8-5f06-4f2f-9547-8b79e1f4b024","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=284a3598-78fe-4bc4-87c7-d8340ffdd732"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"317db1ae-8a55-4010-8b6f-d40baf1fbbe3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=284a3598-78fe-4bc4-87c7-d8340ffdd732"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"f73e1cc8-5f06-4f2f-9547-8b79e1f4b024","username":"system:serviceaccount:llm:e2e-filter-sa-d5ef3177"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"317db1ae-8a55-4010-8b6f-d40baf1fbbe3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-filter-sa-d5ef3177"} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"317db1ae-8a55-4010-8b6f-d40baf1fbbe3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"317db1ae-8a55-4010-8b6f-d40baf1fbbe3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"317db1ae-8a55-4010-8b6f-d40baf1fbbe3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd2a0271-7ccc-425a-8587-9b906de0c6ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:37690","PortSpecifier":{"PortValue":37690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd2a0271-7ccc-425a-8587-9b906de0c6ca","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd2a0271-7ccc-425a-8587-9b906de0c6ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:37690","PortSpecifier":{"PortValue":37690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018476,"nanos":831544217},"http":{"id":"bd2a0271-7ccc-425a-8587-9b906de0c6ca","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"bd2a0271-7ccc-425a-8587-9b906de0c6ca","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bd2a0271-7ccc-425a-8587-9b906de0c6ca","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd2a0271-7ccc-425a-8587-9b906de0c6ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-filter-sa-d5ef3177","uid":"f73e1cc8-5f06-4f2f-9547-8b79e1f4b024","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=284a3598-78fe-4bc4-87c7-d8340ffdd732"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd2a0271-7ccc-425a-8587-9b906de0c6ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=284a3598-78fe-4bc4-87c7-d8340ffdd732"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"f73e1cc8-5f06-4f2f-9547-8b79e1f4b024","username":"system:serviceaccount:llm:e2e-filter-sa-d5ef3177"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd2a0271-7ccc-425a-8587-9b906de0c6ca","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-filter-sa-d5ef3177"} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd2a0271-7ccc-425a-8587-9b906de0c6ca","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd2a0271-7ccc-425a-8587-9b906de0c6ca","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd2a0271-7ccc-425a-8587-9b906de0c6ca","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c7a924a-dd3a-4eef-9f11-abcd309b99ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:27742","PortSpecifier":{"PortValue":27742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c7a924a-dd3a-4eef-9f11-abcd309b99ac","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c7a924a-dd3a-4eef-9f11-abcd309b99ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:27742","PortSpecifier":{"PortValue":27742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018476,"nanos":871745331},"http":{"id":"4c7a924a-dd3a-4eef-9f11-abcd309b99ac","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"4c7a924a-dd3a-4eef-9f11-abcd309b99ac","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c7a924a-dd3a-4eef-9f11-abcd309b99ac","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c7a924a-dd3a-4eef-9f11-abcd309b99ac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-filter-sa-d5ef3177","uid":"f73e1cc8-5f06-4f2f-9547-8b79e1f4b024","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=284a3598-78fe-4bc4-87c7-d8340ffdd732"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c7a924a-dd3a-4eef-9f11-abcd309b99ac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=284a3598-78fe-4bc4-87c7-d8340ffdd732"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"f73e1cc8-5f06-4f2f-9547-8b79e1f4b024","username":"system:serviceaccount:llm:e2e-filter-sa-d5ef3177"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c7a924a-dd3a-4eef-9f11-abcd309b99ac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-filter-sa-d5ef3177"} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c7a924a-dd3a-4eef-9f11-abcd309b99ac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c7a924a-dd3a-4eef-9f11-abcd309b99ac","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c7a924a-dd3a-4eef-9f11-abcd309b99ac","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62299a2e-6d4e-4b0e-8811-086cf315244f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:45162","PortSpecifier":{"PortValue":45162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62299a2e-6d4e-4b0e-8811-086cf315244f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62299a2e-6d4e-4b0e-8811-086cf315244f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:45162","PortSpecifier":{"PortValue":45162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018476,"nanos":905092564},"http":{"id":"62299a2e-6d4e-4b0e-8811-086cf315244f","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"62299a2e-6d4e-4b0e-8811-086cf315244f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"62299a2e-6d4e-4b0e-8811-086cf315244f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62299a2e-6d4e-4b0e-8811-086cf315244f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-filter-sa-d5ef3177","uid":"f73e1cc8-5f06-4f2f-9547-8b79e1f4b024","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=284a3598-78fe-4bc4-87c7-d8340ffdd732"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62299a2e-6d4e-4b0e-8811-086cf315244f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=284a3598-78fe-4bc4-87c7-d8340ffdd732"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"f73e1cc8-5f06-4f2f-9547-8b79e1f4b024","username":"system:serviceaccount:llm:e2e-filter-sa-d5ef3177"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62299a2e-6d4e-4b0e-8811-086cf315244f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-filter-sa-d5ef3177"} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62299a2e-6d4e-4b0e-8811-086cf315244f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62299a2e-6d4e-4b0e-8811-086cf315244f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62299a2e-6d4e-4b0e-8811-086cf315244f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83fc0c11-7ad3-4699-b5ac-e06df948a4c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:31902","PortSpecifier":{"PortValue":31902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83fc0c11-7ad3-4699-b5ac-e06df948a4c8","method":"DELETE","path":"/maas-api/v1/api-keys/d08975cc-a757-4842-b706-300d088df002","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83fc0c11-7ad3-4699-b5ac-e06df948a4c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:31902","PortSpecifier":{"PortValue":31902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018476,"nanos":944224527},"http":{"id":"83fc0c11-7ad3-4699-b5ac-e06df948a4c8","method":"DELETE","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/d08975cc-a757-4842-b706-300d088df002",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"83fc0c11-7ad3-4699-b5ac-e06df948a4c8","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"83fc0c11-7ad3-4699-b5ac-e06df948a4c8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83fc0c11-7ad3-4699-b5ac-e06df948a4c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-filter-sa-d5ef3177","uid":"f73e1cc8-5f06-4f2f-9547-8b79e1f4b024","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=284a3598-78fe-4bc4-87c7-d8340ffdd732"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83fc0c11-7ad3-4699-b5ac-e06df948a4c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=284a3598-78fe-4bc4-87c7-d8340ffdd732"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"f73e1cc8-5f06-4f2f-9547-8b79e1f4b024","username":"system:serviceaccount:llm:e2e-filter-sa-d5ef3177"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/d08975cc-a757-4842-b706-300d088df002",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83fc0c11-7ad3-4699-b5ac-e06df948a4c8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-filter-sa-d5ef3177"} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83fc0c11-7ad3-4699-b5ac-e06df948a4c8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83fc0c11-7ad3-4699-b5ac-e06df948a4c8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83fc0c11-7ad3-4699-b5ac-e06df948a4c8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26246775-5076-4812-a24e-f0de622313e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:37792","PortSpecifier":{"PortValue":37792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26246775-5076-4812-a24e-f0de622313e0","method":"DELETE","path":"/maas-api/v1/api-keys/ad92a035-b6f3-44d7-b77e-79ad50179ef9","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26246775-5076-4812-a24e-f0de622313e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:37792","PortSpecifier":{"PortValue":37792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018476,"nanos":977574524},"http":{"id":"26246775-5076-4812-a24e-f0de622313e0","method":"DELETE","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/ad92a035-b6f3-44d7-b77e-79ad50179ef9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"26246775-5076-4812-a24e-f0de622313e0","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"26246775-5076-4812-a24e-f0de622313e0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26246775-5076-4812-a24e-f0de622313e0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-filter-sa-d5ef3177","uid":"f73e1cc8-5f06-4f2f-9547-8b79e1f4b024","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=284a3598-78fe-4bc4-87c7-d8340ffdd732"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26246775-5076-4812-a24e-f0de622313e0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=284a3598-78fe-4bc4-87c7-d8340ffdd732"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"f73e1cc8-5f06-4f2f-9547-8b79e1f4b024","username":"system:serviceaccount:llm:e2e-filter-sa-d5ef3177"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/ad92a035-b6f3-44d7-b77e-79ad50179ef9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26246775-5076-4812-a24e-f0de622313e0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-filter-sa-d5ef3177"} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26246775-5076-4812-a24e-f0de622313e0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26246775-5076-4812-a24e-f0de622313e0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:21:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26246775-5076-4812-a24e-f0de622313e0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"406a0d59-bc39-4b13-b18a-a17d125e9107","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42718","PortSpecifier":{"PortValue":42718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"406a0d59-bc39-4b13-b18a-a17d125e9107","method":"DELETE","path":"/maas-api/v1/api-keys/be138a8e-1667-432e-b8bc-17647a35f2ed","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"406a0d59-bc39-4b13-b18a-a17d125e9107","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42718","PortSpecifier":{"PortValue":42718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018477,"nanos":11279924},"http":{"id":"406a0d59-bc39-4b13-b18a-a17d125e9107","method":"DELETE","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/be138a8e-1667-432e-b8bc-17647a35f2ed",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"406a0d59-bc39-4b13-b18a-a17d125e9107","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"406a0d59-bc39-4b13-b18a-a17d125e9107","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"406a0d59-bc39-4b13-b18a-a17d125e9107","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-filter-sa-d5ef3177","uid":"f73e1cc8-5f06-4f2f-9547-8b79e1f4b024","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=284a3598-78fe-4bc4-87c7-d8340ffdd732"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"406a0d59-bc39-4b13-b18a-a17d125e9107","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=284a3598-78fe-4bc4-87c7-d8340ffdd732"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"f73e1cc8-5f06-4f2f-9547-8b79e1f4b024","username":"system:serviceaccount:llm:e2e-filter-sa-d5ef3177"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/be138a8e-1667-432e-b8bc-17647a35f2ed",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"406a0d59-bc39-4b13-b18a-a17d125e9107","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-filter-sa-d5ef3177"} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"406a0d59-bc39-4b13-b18a-a17d125e9107","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"406a0d59-bc39-4b13-b18a-a17d125e9107","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"406a0d59-bc39-4b13-b18a-a17d125e9107","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T15:21:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:21:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:21:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T15:21:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:21:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T15:21:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:21:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T15:21:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:21:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"error","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a0833ff-15d8-469a-a632-ccbd34b70b1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:43586","PortSpecifier":{"PortValue":43586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a0833ff-15d8-469a-a632-ccbd34b70b1b","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a0833ff-15d8-469a-a632-ccbd34b70b1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:43586","PortSpecifier":{"PortValue":43586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018486,"nanos":38044152},"http":{"id":"8a0833ff-15d8-469a-a632-ccbd34b70b1b","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"8a0833ff-15d8-469a-a632-ccbd34b70b1b","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8a0833ff-15d8-469a-a632-ccbd34b70b1b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a0833ff-15d8-469a-a632-ccbd34b70b1b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a0833ff-15d8-469a-a632-ccbd34b70b1b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a0833ff-15d8-469a-a632-ccbd34b70b1b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a0833ff-15d8-469a-a632-ccbd34b70b1b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a0833ff-15d8-469a-a632-ccbd34b70b1b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a0833ff-15d8-469a-a632-ccbd34b70b1b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb7aca29-ff82-4a5d-906f-d7a87382eb3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:25370","PortSpecifier":{"PortValue":25370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb7aca29-ff82-4a5d-906f-d7a87382eb3f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb7aca29-ff82-4a5d-906f-d7a87382eb3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:25370","PortSpecifier":{"PortValue":25370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018486,"nanos":75472719},"http":{"id":"bb7aca29-ff82-4a5d-906f-d7a87382eb3f","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"bb7aca29-ff82-4a5d-906f-d7a87382eb3f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bb7aca29-ff82-4a5d-906f-d7a87382eb3f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb7aca29-ff82-4a5d-906f-d7a87382eb3f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb7aca29-ff82-4a5d-906f-d7a87382eb3f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb7aca29-ff82-4a5d-906f-d7a87382eb3f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb7aca29-ff82-4a5d-906f-d7a87382eb3f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb7aca29-ff82-4a5d-906f-d7a87382eb3f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb7aca29-ff82-4a5d-906f-d7a87382eb3f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e89ce945-060d-4e57-abe5-b88a0ea46c1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54956","PortSpecifier":{"PortValue":54956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e89ce945-060d-4e57-abe5-b88a0ea46c1f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e89ce945-060d-4e57-abe5-b88a0ea46c1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54956","PortSpecifier":{"PortValue":54956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018486,"nanos":112107895},"http":{"id":"e89ce945-060d-4e57-abe5-b88a0ea46c1f","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"e89ce945-060d-4e57-abe5-b88a0ea46c1f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e89ce945-060d-4e57-abe5-b88a0ea46c1f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e89ce945-060d-4e57-abe5-b88a0ea46c1f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e89ce945-060d-4e57-abe5-b88a0ea46c1f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e89ce945-060d-4e57-abe5-b88a0ea46c1f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e89ce945-060d-4e57-abe5-b88a0ea46c1f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e89ce945-060d-4e57-abe5-b88a0ea46c1f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e89ce945-060d-4e57-abe5-b88a0ea46c1f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"110a9740-1478-4184-a8ef-d227a7aa4051","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:38020","PortSpecifier":{"PortValue":38020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"110a9740-1478-4184-a8ef-d227a7aa4051","method":"DELETE","path":"/maas-api/v1/api-keys/770c86b9-d7c9-45de-aaa9-333767be2718","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"110a9740-1478-4184-a8ef-d227a7aa4051","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:38020","PortSpecifier":{"PortValue":38020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018486,"nanos":149392769},"http":{"id":"110a9740-1478-4184-a8ef-d227a7aa4051","method":"DELETE","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/770c86b9-d7c9-45de-aaa9-333767be2718",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"110a9740-1478-4184-a8ef-d227a7aa4051","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"110a9740-1478-4184-a8ef-d227a7aa4051","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"110a9740-1478-4184-a8ef-d227a7aa4051","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"110a9740-1478-4184-a8ef-d227a7aa4051","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/770c86b9-d7c9-45de-aaa9-333767be2718",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"110a9740-1478-4184-a8ef-d227a7aa4051","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"110a9740-1478-4184-a8ef-d227a7aa4051","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"110a9740-1478-4184-a8ef-d227a7aa4051","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"110a9740-1478-4184-a8ef-d227a7aa4051","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"276a6539-e806-4080-b7ee-0e277f8ffa96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:42396","PortSpecifier":{"PortValue":42396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"276a6539-e806-4080-b7ee-0e277f8ffa96","method":"DELETE","path":"/maas-api/v1/api-keys/6d55ef6c-c32d-414b-810f-041f5c9aa619","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"276a6539-e806-4080-b7ee-0e277f8ffa96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:42396","PortSpecifier":{"PortValue":42396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018486,"nanos":183133488},"http":{"id":"276a6539-e806-4080-b7ee-0e277f8ffa96","method":"DELETE","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/6d55ef6c-c32d-414b-810f-041f5c9aa619",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"276a6539-e806-4080-b7ee-0e277f8ffa96","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"276a6539-e806-4080-b7ee-0e277f8ffa96","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"276a6539-e806-4080-b7ee-0e277f8ffa96","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"276a6539-e806-4080-b7ee-0e277f8ffa96","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/6d55ef6c-c32d-414b-810f-041f5c9aa619",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"276a6539-e806-4080-b7ee-0e277f8ffa96","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"276a6539-e806-4080-b7ee-0e277f8ffa96","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"276a6539-e806-4080-b7ee-0e277f8ffa96","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"276a6539-e806-4080-b7ee-0e277f8ffa96","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3289ab0-7019-41a5-af42-dc58bea1dc1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:43588","PortSpecifier":{"PortValue":43588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3289ab0-7019-41a5-af42-dc58bea1dc1e","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3289ab0-7019-41a5-af42-dc58bea1dc1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:43588","PortSpecifier":{"PortValue":43588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018486,"nanos":219184425},"http":{"id":"c3289ab0-7019-41a5-af42-dc58bea1dc1e","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c3289ab0-7019-41a5-af42-dc58bea1dc1e","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c3289ab0-7019-41a5-af42-dc58bea1dc1e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3289ab0-7019-41a5-af42-dc58bea1dc1e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3289ab0-7019-41a5-af42-dc58bea1dc1e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3289ab0-7019-41a5-af42-dc58bea1dc1e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3289ab0-7019-41a5-af42-dc58bea1dc1e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3289ab0-7019-41a5-af42-dc58bea1dc1e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3289ab0-7019-41a5-af42-dc58bea1dc1e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"363246f5-cefd-41cf-b678-739b4ffada02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:44812","PortSpecifier":{"PortValue":44812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"363246f5-cefd-41cf-b678-739b4ffada02","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"363246f5-cefd-41cf-b678-739b4ffada02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:44812","PortSpecifier":{"PortValue":44812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018486,"nanos":487646187},"http":{"id":"363246f5-cefd-41cf-b678-739b4ffada02","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"363246f5-cefd-41cf-b678-739b4ffada02","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yCXSvcYARXLNC49O_B0biTdeSjl7QiU6YgbYJ7bdPfPJf09OjGTjxx0ODW9"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"363246f5-cefd-41cf-b678-739b4ffada02","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yCXSvcYARXLNC49O_B0biTdeSjl7QiU6YgbYJ7bdPfPJf09OjGTjxx0ODW9\"}"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"363246f5-cefd-41cf-b678-739b4ffada02","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"363246f5-cefd-41cf-b678-739b4ffada02","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"363246f5-cefd-41cf-b678-739b4ffada02","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"363246f5-cefd-41cf-b678-739b4ffada02","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"363246f5-cefd-41cf-b678-739b4ffada02","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"363246f5-cefd-41cf-b678-739b4ffada02","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"363246f5-cefd-41cf-b678-739b4ffada02","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:21:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9dddb5f-9c6a-4b18-87b5-1348b7355d3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20724","PortSpecifier":{"PortValue":20724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9dddb5f-9c6a-4b18-87b5-1348b7355d3a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:21:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9dddb5f-9c6a-4b18-87b5-1348b7355d3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20724","PortSpecifier":{"PortValue":20724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018503,"nanos":110404761},"http":{"id":"d9dddb5f-9c6a-4b18-87b5-1348b7355d3a","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9dddb5f-9c6a-4b18-87b5-1348b7355d3a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yCXSvcYARXLNC49O_B0biTdeSjl7QiU6YgbYJ7bdPfPJf09OjGTjxx0ODW9"} {"level":"debug","ts":"2026-06-09T15:21:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9dddb5f-9c6a-4b18-87b5-1348b7355d3a","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yCXSvcYARXLNC49O_B0biTdeSjl7QiU6YgbYJ7bdPfPJf09OjGTjxx0ODW9\"}"} {"level":"debug","ts":"2026-06-09T15:21:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9dddb5f-9c6a-4b18-87b5-1348b7355d3a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T15:21:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9dddb5f-9c6a-4b18-87b5-1348b7355d3a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:21:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9dddb5f-9c6a-4b18-87b5-1348b7355d3a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T15:21:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9dddb5f-9c6a-4b18-87b5-1348b7355d3a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:21:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9dddb5f-9c6a-4b18-87b5-1348b7355d3a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:21:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9dddb5f-9c6a-4b18-87b5-1348b7355d3a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:21:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9dddb5f-9c6a-4b18-87b5-1348b7355d3a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee0aa58e94d4d2d6610c107b5cea42e543546e7b9a397bb895fd1f4c4109efa7"} {"level":"debug","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee0aa58e94d4d2d6610c107b5cea42e543546e7b9a397bb895fd1f4c4109efa7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:22:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:22:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee0aa58e94d4d2d6610c107b5cea42e543546e7b9a397bb895fd1f4c4109efa7"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee0aa58e94d4d2d6610c107b5cea42e543546e7b9a397bb895fd1f4c4109efa7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee0aa58e94d4d2d6610c107b5cea42e543546e7b9a397bb895fd1f4c4109efa7"} {"level":"debug","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee0aa58e94d4d2d6610c107b5cea42e543546e7b9a397bb895fd1f4c4109efa7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:22:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:22:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"} {"level":"info","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"} {"level":"info","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:22:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:22:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a721850fa93fc1b04b50005ac37829ae16343856bf8e5aa7434f10b064eaed92"} {"level":"info","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"} {"level":"debug","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a721850fa93fc1b04b50005ac37829ae16343856bf8e5aa7434f10b064eaed92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:22:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:22:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a721850fa93fc1b04b50005ac37829ae16343856bf8e5aa7434f10b064eaed92"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a721850fa93fc1b04b50005ac37829ae16343856bf8e5aa7434f10b064eaed92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a721850fa93fc1b04b50005ac37829ae16343856bf8e5aa7434f10b064eaed92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a721850fa93fc1b04b50005ac37829ae16343856bf8e5aa7434f10b064eaed92"} {"level":"info","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"} {"level":"debug","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:22:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:22:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:22:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:22:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"} {"level":"info","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:22:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:22:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"} {"level":"info","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"} {"level":"debug","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:22:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:22:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"} {"level":"info","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:23:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"} {"level":"info","ts":"2026-06-09T15:23:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee0aa58e94d4d2d6610c107b5cea42e543546e7b9a397bb895fd1f4c4109efa7"} {"level":"info","ts":"2026-06-09T15:23:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a721850fa93fc1b04b50005ac37829ae16343856bf8e5aa7434f10b064eaed92"} {"level":"info","ts":"2026-06-09T15:23:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"} {"level":"info","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"} {"level":"debug","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:23:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:23:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"} {"level":"debug","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:23:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:23:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"} {"level":"debug","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:23:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:23:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"} {"level":"info","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"} {"level":"debug","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:23:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:23:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:23:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:23:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"} {"level":"error","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:23:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:23:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:23:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:23:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"} {"level":"error","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a38ec10799cdabc7e353e8e843120e6d3e89fcf4caeb2a81710896f38e92155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T15:23:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T15:23:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a38ec10799cdabc7e353e8e843120e6d3e89fcf4caeb2a81710896f38e92155"} {"level":"info","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a38ec10799cdabc7e353e8e843120e6d3e89fcf4caeb2a81710896f38e92155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a38ec10799cdabc7e353e8e843120e6d3e89fcf4caeb2a81710896f38e92155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:23:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:23:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a38ec10799cdabc7e353e8e843120e6d3e89fcf4caeb2a81710896f38e92155"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a38ec10799cdabc7e353e8e843120e6d3e89fcf4caeb2a81710896f38e92155"} {"level":"info","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b0f3a6d106b7791f558e64a255da41700259a71c288703d79f42be065a2a65c"} {"level":"info","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a38ec10799cdabc7e353e8e843120e6d3e89fcf4caeb2a81710896f38e92155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b0f3a6d106b7791f558e64a255da41700259a71c288703d79f42be065a2a65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T15:23:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T15:23:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b0f3a6d106b7791f558e64a255da41700259a71c288703d79f42be065a2a65c"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a38ec10799cdabc7e353e8e843120e6d3e89fcf4caeb2a81710896f38e92155"} {"level":"info","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b0f3a6d106b7791f558e64a255da41700259a71c288703d79f42be065a2a65c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b0f3a6d106b7791f558e64a255da41700259a71c288703d79f42be065a2a65c"} {"level":"debug","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a38ec10799cdabc7e353e8e843120e6d3e89fcf4caeb2a81710896f38e92155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T15:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b0f3a6d106b7791f558e64a255da41700259a71c288703d79f42be065a2a65c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T15:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b0f3a6d106b7791f558e64a255da41700259a71c288703d79f42be065a2a65c"} {"level":"info","ts":"2026-06-09T15:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"} {"level":"info","ts":"2026-06-09T15:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a38ec10799cdabc7e353e8e843120e6d3e89fcf4caeb2a81710896f38e92155"} {"level":"info","ts":"2026-06-09T15:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"} {"level":"info","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbcdf523-cd01-46fd-88cf-e3ba3ab15403","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50996","PortSpecifier":{"PortValue":50996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dbcdf523-cd01-46fd-88cf-e3ba3ab15403","method":"DELETE","path":"/maas-api/v1/api-keys/291485e5-3c8c-455a-83cf-4095c8653efe","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbcdf523-cd01-46fd-88cf-e3ba3ab15403","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50996","PortSpecifier":{"PortValue":50996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018632,"nanos":729200190},"http":{"id":"dbcdf523-cd01-46fd-88cf-e3ba3ab15403","method":"DELETE","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/291485e5-3c8c-455a-83cf-4095c8653efe",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"dbcdf523-cd01-46fd-88cf-e3ba3ab15403","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dbcdf523-cd01-46fd-88cf-e3ba3ab15403","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dbcdf523-cd01-46fd-88cf-e3ba3ab15403","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dbcdf523-cd01-46fd-88cf-e3ba3ab15403","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/291485e5-3c8c-455a-83cf-4095c8653efe",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbcdf523-cd01-46fd-88cf-e3ba3ab15403","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbcdf523-cd01-46fd-88cf-e3ba3ab15403","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbcdf523-cd01-46fd-88cf-e3ba3ab15403","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbcdf523-cd01-46fd-88cf-e3ba3ab15403","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35cebe6d-a546-496f-a3a2-1e8a27cd1cc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:57172","PortSpecifier":{"PortValue":57172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35cebe6d-a546-496f-a3a2-1e8a27cd1cc5","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35cebe6d-a546-496f-a3a2-1e8a27cd1cc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:57172","PortSpecifier":{"PortValue":57172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018632,"nanos":775517607},"http":{"id":"35cebe6d-a546-496f-a3a2-1e8a27cd1cc5","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"35cebe6d-a546-496f-a3a2-1e8a27cd1cc5","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"35cebe6d-a546-496f-a3a2-1e8a27cd1cc5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35cebe6d-a546-496f-a3a2-1e8a27cd1cc5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35cebe6d-a546-496f-a3a2-1e8a27cd1cc5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35cebe6d-a546-496f-a3a2-1e8a27cd1cc5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35cebe6d-a546-496f-a3a2-1e8a27cd1cc5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35cebe6d-a546-496f-a3a2-1e8a27cd1cc5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35cebe6d-a546-496f-a3a2-1e8a27cd1cc5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07cb3806-95a2-4112-92ca-dbb835955540","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:44260","PortSpecifier":{"PortValue":44260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07cb3806-95a2-4112-92ca-dbb835955540","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07cb3806-95a2-4112-92ca-dbb835955540","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:44260","PortSpecifier":{"PortValue":44260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018632,"nanos":828381063},"http":{"id":"07cb3806-95a2-4112-92ca-dbb835955540","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"07cb3806-95a2-4112-92ca-dbb835955540","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"07cb3806-95a2-4112-92ca-dbb835955540","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07cb3806-95a2-4112-92ca-dbb835955540","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07cb3806-95a2-4112-92ca-dbb835955540","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07cb3806-95a2-4112-92ca-dbb835955540","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07cb3806-95a2-4112-92ca-dbb835955540","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07cb3806-95a2-4112-92ca-dbb835955540","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07cb3806-95a2-4112-92ca-dbb835955540","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7453fd7a-528a-4891-99b5-99c6de583d28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36812","PortSpecifier":{"PortValue":36812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7453fd7a-528a-4891-99b5-99c6de583d28","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7453fd7a-528a-4891-99b5-99c6de583d28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36812","PortSpecifier":{"PortValue":36812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018632,"nanos":871146548},"http":{"id":"7453fd7a-528a-4891-99b5-99c6de583d28","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"7453fd7a-528a-4891-99b5-99c6de583d28","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7453fd7a-528a-4891-99b5-99c6de583d28","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7453fd7a-528a-4891-99b5-99c6de583d28","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7453fd7a-528a-4891-99b5-99c6de583d28","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7453fd7a-528a-4891-99b5-99c6de583d28","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7453fd7a-528a-4891-99b5-99c6de583d28","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7453fd7a-528a-4891-99b5-99c6de583d28","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7453fd7a-528a-4891-99b5-99c6de583d28","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd4667ab-24a3-46c4-bb6b-3107ccd7d8a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:29170","PortSpecifier":{"PortValue":29170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd4667ab-24a3-46c4-bb6b-3107ccd7d8a5","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd4667ab-24a3-46c4-bb6b-3107ccd7d8a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:29170","PortSpecifier":{"PortValue":29170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781018632,"nanos":904106590},"http":{"id":"dd4667ab-24a3-46c4-bb6b-3107ccd7d8a5","method":"POST","headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"dd4667ab-24a3-46c4-bb6b-3107ccd7d8a5","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dd4667ab-24a3-46c4-bb6b-3107ccd7d8a5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd4667ab-24a3-46c4-bb6b-3107ccd7d8a5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"984f52c3-0847-4edf-864f-961c85f68b1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"]}} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd4667ab-24a3-46c4-bb6b-3107ccd7d8a5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/95d9072786f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7a5e2195-9dd9-4fb4-923e-3165dd7b6aa9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"984f52c3-0847-4edf-864f-961c85f68b1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.49362715-6dbb-47f3-bb57-95d9072786f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd4667ab-24a3-46c4-bb6b-3107ccd7d8a5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd4667ab-24a3-46c4-bb6b-3107ccd7d8a5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd4667ab-24a3-46c4-bb6b-3107ccd7d8a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T15:23:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd4667ab-24a3-46c4-bb6b-3107ccd7d8a5","authorized":true,"response":"OK"}