{"level":"info","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09f2d805-ebcd-44fb-b7bd-e40abc274969","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:49968","PortSpecifier":{"PortValue":49968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09f2d805-ebcd-44fb-b7bd-e40abc274969","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09f2d805-ebcd-44fb-b7bd-e40abc274969","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:49968","PortSpecifier":{"PortValue":49968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094843,"nanos":731708140},"http":{"id":"09f2d805-ebcd-44fb-b7bd-e40abc274969","method":"POST","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"09f2d805-ebcd-44fb-b7bd-e40abc274969","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09f2d805-ebcd-44fb-b7bd-e40abc274969","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09f2d805-ebcd-44fb-b7bd-e40abc274969","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8888d36a-474e-4669-afc2-6988335fe940","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=268ce654-90e0-4db3-a5b0-1c7a532e4ee3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/07d988144793"]}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09f2d805-ebcd-44fb-b7bd-e40abc274969","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/07d988144793"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=268ce654-90e0-4db3-a5b0-1c7a532e4ee3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8888d36a-474e-4669-afc2-6988335fe940","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09f2d805-ebcd-44fb-b7bd-e40abc274969","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09f2d805-ebcd-44fb-b7bd-e40abc274969","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09f2d805-ebcd-44fb-b7bd-e40abc274969","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09f2d805-ebcd-44fb-b7bd-e40abc274969","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46523787-db0a-4e31-b82a-12e45c775d71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3186","PortSpecifier":{"PortValue":3186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46523787-db0a-4e31-b82a-12e45c775d71","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46523787-db0a-4e31-b82a-12e45c775d71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3186","PortSpecifier":{"PortValue":3186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094843,"nanos":775749236},"http":{"id":"46523787-db0a-4e31-b82a-12e45c775d71","method":"POST","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46523787-db0a-4e31-b82a-12e45c775d71","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qzzLss7aa06W0uj3_qRxhNdr28riNRGfcWeYztIlIJ79zg6HGPqzb950GAvv"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46523787-db0a-4e31-b82a-12e45c775d71","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qzzLss7aa06W0uj3_qRxhNdr28riNRGfcWeYztIlIJ79zg6HGPqzb950GAvv\"}"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46523787-db0a-4e31-b82a-12e45c775d71","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46523787-db0a-4e31-b82a-12e45c775d71","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-central-models-exempt-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46523787-db0a-4e31-b82a-12e45c775d71","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46523787-db0a-4e31-b82a-12e45c775d71","input":{"auth":{"identity":"Bearer **** with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46523787-db0a-4e31-b82a-12e45c775d71","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46523787-db0a-4e31-b82a-12e45c775d71","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46523787-db0a-4e31-b82a-12e45c775d71","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46523787-db0a-4e31-b82a-12e45c775d71","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46523787-db0a-4e31-b82a-12e45c775d71","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46523787-db0a-4e31-b82a-12e45c775d71","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e0e21dbf-bcea-49fa-9df0-c10d4d2431de","selected_subscription":"e2e-central-models-exempt-sub","selected_subscription_key":"models-as-a-service/e2e-central-models-exempt-sub@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46523787-db0a-4e31-b82a-12e45c775d71","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46523787-db0a-4e31-b82a-12e45c775d71","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ef5fbc9-556c-4877-b9b0-89595cb097f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:2002","PortSpecifier":{"PortValue":2002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ef5fbc9-556c-4877-b9b0-89595cb097f0","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ef5fbc9-556c-4877-b9b0-89595cb097f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:2002","PortSpecifier":{"PortValue":2002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094843,"nanos":815188292},"http":{"id":"4ef5fbc9-556c-4877-b9b0-89595cb097f0","method":"POST","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ef5fbc9-556c-4877-b9b0-89595cb097f0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qzzLss7aa06W0uj3_qRxhNdr28riNRGfcWeYztIlIJ79zg6HGPqzb950GAvv"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ef5fbc9-556c-4877-b9b0-89595cb097f0","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qzzLss7aa06W0uj3_qRxhNdr28riNRGfcWeYztIlIJ79zg6HGPqzb950GAvv\"}"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ef5fbc9-556c-4877-b9b0-89595cb097f0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ef5fbc9-556c-4877-b9b0-89595cb097f0","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-central-models-exempt-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ef5fbc9-556c-4877-b9b0-89595cb097f0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ef5fbc9-556c-4877-b9b0-89595cb097f0","input":{"auth":{"identity":"Bearer **** with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ef5fbc9-556c-4877-b9b0-89595cb097f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ef5fbc9-556c-4877-b9b0-89595cb097f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ef5fbc9-556c-4877-b9b0-89595cb097f0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ef5fbc9-556c-4877-b9b0-89595cb097f0","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ef5fbc9-556c-4877-b9b0-89595cb097f0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ef5fbc9-556c-4877-b9b0-89595cb097f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e0e21dbf-bcea-49fa-9df0-c10d4d2431de","selected_subscription":"e2e-central-models-exempt-sub","selected_subscription_key":"models-as-a-service/e2e-central-models-exempt-sub@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ef5fbc9-556c-4877-b9b0-89595cb097f0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ef5fbc9-556c-4877-b9b0-89595cb097f0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb5204d1-8d25-90b7-a2fa-f1b7920d2336","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:38086","PortSpecifier":{"PortValue":38086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb5204d1-8d25-90b7-a2fa-f1b7920d2336","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb5204d1-8d25-90b7-a2fa-f1b7920d2336","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:38086","PortSpecifier":{"PortValue":38086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094843,"nanos":843912619},"http":{"id":"cb5204d1-8d25-90b7-a2fa-f1b7920d2336","method":"POST","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb5204d1-8d25-90b7-a2fa-f1b7920d2336","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qzzLss7aa06W0uj3_qRxhNdr28riNRGfcWeYztIlIJ79zg6HGPqzb950GAvv"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb5204d1-8d25-90b7-a2fa-f1b7920d2336","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qzzLss7aa06W0uj3_qRxhNdr28riNRGfcWeYztIlIJ79zg6HGPqzb950GAvv\"}"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb5204d1-8d25-90b7-a2fa-f1b7920d2336","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb5204d1-8d25-90b7-a2fa-f1b7920d2336","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-central-models-exempt-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb5204d1-8d25-90b7-a2fa-f1b7920d2336","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb5204d1-8d25-90b7-a2fa-f1b7920d2336","input":{"auth":{"identity":"Bearer **** with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb5204d1-8d25-90b7-a2fa-f1b7920d2336","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb5204d1-8d25-90b7-a2fa-f1b7920d2336","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb5204d1-8d25-90b7-a2fa-f1b7920d2336","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb5204d1-8d25-90b7-a2fa-f1b7920d2336","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb5204d1-8d25-90b7-a2fa-f1b7920d2336","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb5204d1-8d25-90b7-a2fa-f1b7920d2336","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e0e21dbf-bcea-49fa-9df0-c10d4d2431de","selected_subscription":"e2e-central-models-exempt-sub","selected_subscription_key":"models-as-a-service/e2e-central-models-exempt-sub@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb5204d1-8d25-90b7-a2fa-f1b7920d2336","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb5204d1-8d25-90b7-a2fa-f1b7920d2336","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07e90e10-dc15-440a-bed2-84f4c30e0069","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:49970","PortSpecifier":{"PortValue":49970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07e90e10-dc15-440a-bed2-84f4c30e0069","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07e90e10-dc15-440a-bed2-84f4c30e0069","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:49970","PortSpecifier":{"PortValue":49970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094843,"nanos":874053380},"http":{"id":"07e90e10-dc15-440a-bed2-84f4c30e0069","method":"GET","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07e90e10-dc15-440a-bed2-84f4c30e0069","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qzzLss7aa06W0uj3_qRxhNdr28riNRGfcWeYztIlIJ79zg6HGPqzb950GAvv"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"07e90e10-dc15-440a-bed2-84f4c30e0069","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qzzLss7aa06W0uj3_qRxhNdr28riNRGfcWeYztIlIJ79zg6HGPqzb950GAvv\"}"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"07e90e10-dc15-440a-bed2-84f4c30e0069","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07e90e10-dc15-440a-bed2-84f4c30e0069","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07e90e10-dc15-440a-bed2-84f4c30e0069","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07e90e10-dc15-440a-bed2-84f4c30e0069","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07e90e10-dc15-440a-bed2-84f4c30e0069","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07e90e10-dc15-440a-bed2-84f4c30e0069","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07e90e10-dc15-440a-bed2-84f4c30e0069","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9336255f-cfaf-41eb-8519-7a77d30183fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:34136","PortSpecifier":{"PortValue":34136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9336255f-cfaf-41eb-8519-7a77d30183fb","method":"GET","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9336255f-cfaf-41eb-8519-7a77d30183fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:34136","PortSpecifier":{"PortValue":34136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094843,"nanos":880973793},"http":{"id":"9336255f-cfaf-41eb-8519-7a77d30183fb","method":"GET","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9336255f-cfaf-41eb-8519-7a77d30183fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qzzLss7aa06W0uj3_qRxhNdr28riNRGfcWeYztIlIJ79zg6HGPqzb950GAvv"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9336255f-cfaf-41eb-8519-7a77d30183fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qzzLss7aa06W0uj3_qRxhNdr28riNRGfcWeYztIlIJ79zg6HGPqzb950GAvv\"}"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9336255f-cfaf-41eb-8519-7a77d30183fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9336255f-cfaf-41eb-8519-7a77d30183fb","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-central-models-exempt-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9336255f-cfaf-41eb-8519-7a77d30183fb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9336255f-cfaf-41eb-8519-7a77d30183fb","input":{"auth":{"identity":"Bearer **** with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-qzzLss7aa06W0uj3_qRxhNdr28riNRGfcWeYztIlIJ79zg6HGPqzb950GAvv","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"e2e-unconfiab60ef4d3a239b5143b412cab04acac3-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.52","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.35~maas-default-gateway-openshift-default-687ff6996-7mcwg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.132.0.52","x-forwarded-proto":"https","x-maas-subscription":"e2e-central-models-exempt-sub","x-request-id":"9336255f-cfaf-41eb-8519-7a77d30183fb"},"host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","id":"9336255f-cfaf-41eb-8519-7a77d30183fb","method":"GET","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":880973793,"seconds":1781094843},"url_path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.132.0.52:34136","port":34136}}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9336255f-cfaf-41eb-8519-7a77d30183fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9336255f-cfaf-41eb-8519-7a77d30183fb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9336255f-cfaf-41eb-8519-7a77d30183fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9336255f-cfaf-41eb-8519-7a77d30183fb","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9336255f-cfaf-41eb-8519-7a77d30183fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9336255f-cfaf-41eb-8519-7a77d30183fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e0e21dbf-bcea-49fa-9df0-c10d4d2431de","selected_subscription":"e2e-central-models-exempt-sub","selected_subscription_key":"models-as-a-service/e2e-central-models-exempt-sub@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9336255f-cfaf-41eb-8519-7a77d30183fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9336255f-cfaf-41eb-8519-7a77d30183fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T12:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T12:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T12:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T12:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"debug","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T12:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T12:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T12:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T12:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T12:33:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T12:33:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"info","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T12:33:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T12:33:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"debug","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T12:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T12:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"debug","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T12:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T12:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"info","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64ca2c7878e2fa23492a363c1c1bf69fca4e29dd13b556ebc710e085d89faaa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T12:34:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T12:34:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64ca2c7878e2fa23492a363c1c1bf69fca4e29dd13b556ebc710e085d89faaa3"}
{"level":"info","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64ca2c7878e2fa23492a363c1c1bf69fca4e29dd13b556ebc710e085d89faaa3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64ca2c7878e2fa23492a363c1c1bf69fca4e29dd13b556ebc710e085d89faaa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T12:34:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T12:34:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64ca2c7878e2fa23492a363c1c1bf69fca4e29dd13b556ebc710e085d89faaa3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64ca2c7878e2fa23492a363c1c1bf69fca4e29dd13b556ebc710e085d89faaa3"}
{"level":"info","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64ca2c7878e2fa23492a363c1c1bf69fca4e29dd13b556ebc710e085d89faaa3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64ca2c7878e2fa23492a363c1c1bf69fca4e29dd13b556ebc710e085d89faaa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T12:34:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T12:34:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64ca2c7878e2fa23492a363c1c1bf69fca4e29dd13b556ebc710e085d89faaa3"}
{"level":"error","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"64ca2c7878e2fa23492a363c1c1bf69fca4e29dd13b556ebc710e085d89faaa3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"64ca2c7878e2fa23492a363c1c1bf69fca4e29dd13b556ebc710e085d89faaa3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64ca2c7878e2fa23492a363c1c1bf69fca4e29dd13b556ebc710e085d89faaa3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64ca2c7878e2fa23492a363c1c1bf69fca4e29dd13b556ebc710e085d89faaa3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d817f78a5bc132680082eed4332d7efbf4588fde431c72a51d1fb0a9723fb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T12:34:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T12:34:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d817f78a5bc132680082eed4332d7efbf4588fde431c72a51d1fb0a9723fb2"}
{"level":"info","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d817f78a5bc132680082eed4332d7efbf4588fde431c72a51d1fb0a9723fb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d817f78a5bc132680082eed4332d7efbf4588fde431c72a51d1fb0a9723fb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T12:34:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T12:34:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d817f78a5bc132680082eed4332d7efbf4588fde431c72a51d1fb0a9723fb2"}
{"level":"info","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d817f78a5bc132680082eed4332d7efbf4588fde431c72a51d1fb0a9723fb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d817f78a5bc132680082eed4332d7efbf4588fde431c72a51d1fb0a9723fb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d817f78a5bc132680082eed4332d7efbf4588fde431c72a51d1fb0a9723fb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d817f78a5bc132680082eed4332d7efbf4588fde431c72a51d1fb0a9723fb2"}
{"level":"debug","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d817f78a5bc132680082eed4332d7efbf4588fde431c72a51d1fb0a9723fb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T12:34:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T12:34:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d817f78a5bc132680082eed4332d7efbf4588fde431c72a51d1fb0a9723fb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d817f78a5bc132680082eed4332d7efbf4588fde431c72a51d1fb0a9723fb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d817f78a5bc132680082eed4332d7efbf4588fde431c72a51d1fb0a9723fb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T12:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d817f78a5bc132680082eed4332d7efbf4588fde431c72a51d1fb0a9723fb2"}
{"level":"info","ts":"2026-06-10T12:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64ca2c7878e2fa23492a363c1c1bf69fca4e29dd13b556ebc710e085d89faaa3"}
{"level":"info","ts":"2026-06-10T12:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35d817f78a5bc132680082eed4332d7efbf4588fde431c72a51d1fb0a9723fb2"}
{"level":"debug","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T12:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T12:34:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0"}
{"level":"info","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0"}
{"level":"debug","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T12:34:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T12:34:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T12:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T12:34:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0"}
{"level":"info","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0"}
{"level":"debug","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T12:34:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T12:34:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T12:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T12:34:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0"}
{"level":"info","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0"}
{"level":"debug","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T12:34:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T12:34:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T12:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T12:34:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0"}
{"level":"info","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T12:34:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T12:34:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0"}
{"level":"info","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6efe60e4bb8c17029fb90187d1285c1a3803503d07e4b60329b37d3857f7541"}
{"level":"info","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6efe60e4bb8c17029fb90187d1285c1a3803503d07e4b60329b37d3857f7541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T12:34:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T12:34:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6efe60e4bb8c17029fb90187d1285c1a3803503d07e4b60329b37d3857f7541"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0"}
{"level":"info","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6efe60e4bb8c17029fb90187d1285c1a3803503d07e4b60329b37d3857f7541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6efe60e4bb8c17029fb90187d1285c1a3803503d07e4b60329b37d3857f7541","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T12:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6efe60e4bb8c17029fb90187d1285c1a3803503d07e4b60329b37d3857f7541"}
{"level":"info","ts":"2026-06-10T12:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6efe60e4bb8c17029fb90187d1285c1a3803503d07e4b60329b37d3857f7541"}
{"level":"info","ts":"2026-06-10T12:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3caf0234f5b99ff126c689dbb29f69d3f851160e97884c2cf1c9b67c068e67d0"}
{"level":"info","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d34d5370-efed-4d86-b3ed-c966c51846e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:42446","PortSpecifier":{"PortValue":42446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d34d5370-efed-4d86-b3ed-c966c51846e2","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d34d5370-efed-4d86-b3ed-c966c51846e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:42446","PortSpecifier":{"PortValue":42446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094882,"nanos":468580475},"http":{"id":"d34d5370-efed-4d86-b3ed-c966c51846e2","method":"POST","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d34d5370-efed-4d86-b3ed-c966c51846e2","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095182,"groups":["Engineering","Project-Alpha"],"iat":1781094882,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:4ede37d3-ef77-d0c7-c037-5bce8e5e7b33","preferred_username":"alice_lead","scope":"profile email","sid":"43b5QrIkzhAgnO18J_wpOZQx","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d34d5370-efed-4d86-b3ed-c966c51846e2","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095182,"groups":["Engineering","Project-Alpha"],"iat":1781094882,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:4ede37d3-ef77-d0c7-c037-5bce8e5e7b33","preferred_username":"alice_lead","scope":"profile email","sid":"43b5QrIkzhAgnO18J_wpOZQx","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d34d5370-efed-4d86-b3ed-c966c51846e2","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d34d5370-efed-4d86-b3ed-c966c51846e2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d34d5370-efed-4d86-b3ed-c966c51846e2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d34d5370-efed-4d86-b3ed-c966c51846e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d34d5370-efed-4d86-b3ed-c966c51846e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eca8ae90-dc5e-40e7-95d6-17a36d3f72cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:7174","PortSpecifier":{"PortValue":7174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eca8ae90-dc5e-40e7-95d6-17a36d3f72cc","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eca8ae90-dc5e-40e7-95d6-17a36d3f72cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:7174","PortSpecifier":{"PortValue":7174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094882,"nanos":563496297},"http":{"id":"eca8ae90-dc5e-40e7-95d6-17a36d3f72cc","method":"POST","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"eca8ae90-dc5e-40e7-95d6-17a36d3f72cc","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eca8ae90-dc5e-40e7-95d6-17a36d3f72cc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"eca8ae90-dc5e-40e7-95d6-17a36d3f72cc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"not authenticated"}
{"level":"info","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eca8ae90-dc5e-40e7-95d6-17a36d3f72cc","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}"}}
{"level":"debug","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eca8ae90-dc5e-40e7-95d6-17a36d3f72cc","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}}
{"level":"info","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbd7d251-120d-428a-a0c5-603f72e98368","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:6166","PortSpecifier":{"PortValue":6166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dbd7d251-120d-428a-a0c5-603f72e98368","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbd7d251-120d-428a-a0c5-603f72e98368","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:6166","PortSpecifier":{"PortValue":6166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094882,"nanos":614923094},"http":{"id":"dbd7d251-120d-428a-a0c5-603f72e98368","method":"POST","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer","content-length":"35","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.35~maas-default-gateway-openshift-default-687ff6996-7mcwg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-request-id":"dbd7d251-120d-428a-a0c5-603f72e98368"},"path":"/maas-api/v1/api-keys","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"metadata_context":{}}}
{"level":"debug","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"dbd7d251-120d-428a-a0c5-603f72e98368","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"credential not found"}
{"level":"info","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbd7d251-120d-428a-a0c5-603f72e98368","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"openshift-identities\":\"credential not found\"}"}}
{"level":"debug","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbd7d251-120d-428a-a0c5-603f72e98368","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"openshift-identities\":\"credential not found\"}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}}
{"level":"info","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fba640d3-760b-4824-8198-dcca3a3cb0f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:35398","PortSpecifier":{"PortValue":35398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fba640d3-760b-4824-8198-dcca3a3cb0f9","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fba640d3-760b-4824-8198-dcca3a3cb0f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:35398","PortSpecifier":{"PortValue":35398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094882,"nanos":638775044},"http":{"id":"fba640d3-760b-4824-8198-dcca3a3cb0f9","method":"POST","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-length":"36","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.35~maas-default-gateway-openshift-default-687ff6996-7mcwg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-request-id":"fba640d3-760b-4824-8198-dcca3a3cb0f9"},"path":"/maas-api/v1/api-keys","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"metadata_context":{}}}
{"level":"info","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fba640d3-760b-4824-8198-dcca3a3cb0f9","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}"}}
{"level":"debug","ts":"2026-06-10T12:34:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fba640d3-760b-4824-8198-dcca3a3cb0f9","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}}
{"level":"info","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecf52ac5-3396-4aa3-80fa-1abe3d8db2d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:43988","PortSpecifier":{"PortValue":43988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ecf52ac5-3396-4aa3-80fa-1abe3d8db2d0","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecf52ac5-3396-4aa3-80fa-1abe3d8db2d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:43988","PortSpecifier":{"PortValue":43988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094883,"nanos":18488375},"http":{"id":"ecf52ac5-3396-4aa3-80fa-1abe3d8db2d0","method":"POST","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ecf52ac5-3396-4aa3-80fa-1abe3d8db2d0","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095182,"groups":["Site-Reliability"],"iat":1781094882,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2a3a7ca2-1b8e-33c5-3d62-b834bf63cf72","preferred_username":"bob_sre","scope":"profile email","sid":"o7xizvhGAakX3BIgCFsK6b9a","sub":"53b3037b-10d0-4a11-929f-6ec74effaa7a","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ecf52ac5-3396-4aa3-80fa-1abe3d8db2d0","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095182,"groups":["Site-Reliability"],"iat":1781094882,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2a3a7ca2-1b8e-33c5-3d62-b834bf63cf72","preferred_username":"bob_sre","scope":"profile email","sid":"o7xizvhGAakX3BIgCFsK6b9a","sub":"53b3037b-10d0-4a11-929f-6ec74effaa7a","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecf52ac5-3396-4aa3-80fa-1abe3d8db2d0","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecf52ac5-3396-4aa3-80fa-1abe3d8db2d0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecf52ac5-3396-4aa3-80fa-1abe3d8db2d0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"}
{"level":"info","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecf52ac5-3396-4aa3-80fa-1abe3d8db2d0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecf52ac5-3396-4aa3-80fa-1abe3d8db2d0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c583b61c-4649-4531-97f4-ae542e3ebd4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:42462","PortSpecifier":{"PortValue":42462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c583b61c-4649-4531-97f4-ae542e3ebd4d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c583b61c-4649-4531-97f4-ae542e3ebd4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:42462","PortSpecifier":{"PortValue":42462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094883,"nanos":228483020},"http":{"id":"c583b61c-4649-4531-97f4-ae542e3ebd4d","method":"POST","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c583b61c-4649-4531-97f4-ae542e3ebd4d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095183,"groups":["Engineering","Project-Alpha"],"iat":1781094883,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:c2b03718-17b9-cd1a-62fe-7860f7670865","preferred_username":"alice_lead","scope":"profile email","sid":"FxY9TYF3NhaY2rsSdMvLtqoi","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c583b61c-4649-4531-97f4-ae542e3ebd4d","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095183,"groups":["Engineering","Project-Alpha"],"iat":1781094883,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:c2b03718-17b9-cd1a-62fe-7860f7670865","preferred_username":"alice_lead","scope":"profile email","sid":"FxY9TYF3NhaY2rsSdMvLtqoi","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c583b61c-4649-4531-97f4-ae542e3ebd4d","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c583b61c-4649-4531-97f4-ae542e3ebd4d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c583b61c-4649-4531-97f4-ae542e3ebd4d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c583b61c-4649-4531-97f4-ae542e3ebd4d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c583b61c-4649-4531-97f4-ae542e3ebd4d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9978930-e038-4147-beb2-3e2c980470fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:14824","PortSpecifier":{"PortValue":14824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9978930-e038-4147-beb2-3e2c980470fe","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9978930-e038-4147-beb2-3e2c980470fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:14824","PortSpecifier":{"PortValue":14824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094883,"nanos":257248699},"http":{"id":"c9978930-e038-4147-beb2-3e2c980470fe","method":"GET","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9978930-e038-4147-beb2-3e2c980470fe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Gr41GOVHrY6M4aph_RIsHz5bTSFeutlUNn1SnXExJ0LXaD6KOHmhFPYA3tf"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9978930-e038-4147-beb2-3e2c980470fe","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Gr41GOVHrY6M4aph_RIsHz5bTSFeutlUNn1SnXExJ0LXaD6KOHmhFPYA3tf\"}"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9978930-e038-4147-beb2-3e2c980470fe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9978930-e038-4147-beb2-3e2c980470fe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9978930-e038-4147-beb2-3e2c980470fe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9978930-e038-4147-beb2-3e2c980470fe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9978930-e038-4147-beb2-3e2c980470fe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9978930-e038-4147-beb2-3e2c980470fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9978930-e038-4147-beb2-3e2c980470fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7b2735e-b50a-4dae-bcdf-f561993f5854","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:34136","PortSpecifier":{"PortValue":34136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7b2735e-b50a-4dae-bcdf-f561993f5854","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7b2735e-b50a-4dae-bcdf-f561993f5854","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:34136","PortSpecifier":{"PortValue":34136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094883,"nanos":262589135},"http":{"id":"f7b2735e-b50a-4dae-bcdf-f561993f5854","method":"GET","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7b2735e-b50a-4dae-bcdf-f561993f5854","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Gr41GOVHrY6M4aph_RIsHz5bTSFeutlUNn1SnXExJ0LXaD6KOHmhFPYA3tf"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f7b2735e-b50a-4dae-bcdf-f561993f5854","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Gr41GOVHrY6M4aph_RIsHz5bTSFeutlUNn1SnXExJ0LXaD6KOHmhFPYA3tf\"}"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f7b2735e-b50a-4dae-bcdf-f561993f5854","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f7b2735e-b50a-4dae-bcdf-f561993f5854","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f7b2735e-b50a-4dae-bcdf-f561993f5854","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7b2735e-b50a-4dae-bcdf-f561993f5854","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-Gr41GOVHrY6M4aph_RIsHz5bTSFeutlUNn1SnXExJ0LXaD6KOHmhFPYA3tf","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.52","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.35~maas-default-gateway-openshift-default-687ff6996-7mcwg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.132.0.52","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"f7b2735e-b50a-4dae-bcdf-f561993f5854"},"host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","id":"f7b2735e-b50a-4dae-bcdf-f561993f5854","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":262589135,"seconds":1781094883},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.132.0.52:34136","port":34136}}}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7b2735e-b50a-4dae-bcdf-f561993f5854","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7b2735e-b50a-4dae-bcdf-f561993f5854","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7b2735e-b50a-4dae-bcdf-f561993f5854","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7b2735e-b50a-4dae-bcdf-f561993f5854","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7b2735e-b50a-4dae-bcdf-f561993f5854","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7b2735e-b50a-4dae-bcdf-f561993f5854","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"a7f07680-689a-4947-9758-b3913b26bfdf","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7b2735e-b50a-4dae-bcdf-f561993f5854","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7b2735e-b50a-4dae-bcdf-f561993f5854","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0461c844-8806-4749-9320-fee1166818f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:6182","PortSpecifier":{"PortValue":6182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0461c844-8806-4749-9320-fee1166818f7","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0461c844-8806-4749-9320-fee1166818f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:6182","PortSpecifier":{"PortValue":6182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094883,"nanos":291356489},"http":{"id":"0461c844-8806-4749-9320-fee1166818f7","method":"POST","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0461c844-8806-4749-9320-fee1166818f7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Gr41GOVHrY6M4aph_RIsHz5bTSFeutlUNn1SnXExJ0LXaD6KOHmhFPYA3tf"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0461c844-8806-4749-9320-fee1166818f7","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Gr41GOVHrY6M4aph_RIsHz5bTSFeutlUNn1SnXExJ0LXaD6KOHmhFPYA3tf\"}"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0461c844-8806-4749-9320-fee1166818f7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0461c844-8806-4749-9320-fee1166818f7","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0461c844-8806-4749-9320-fee1166818f7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0461c844-8806-4749-9320-fee1166818f7","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0461c844-8806-4749-9320-fee1166818f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0461c844-8806-4749-9320-fee1166818f7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0461c844-8806-4749-9320-fee1166818f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0461c844-8806-4749-9320-fee1166818f7","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0461c844-8806-4749-9320-fee1166818f7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0461c844-8806-4749-9320-fee1166818f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"a7f07680-689a-4947-9758-b3913b26bfdf","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0461c844-8806-4749-9320-fee1166818f7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0461c844-8806-4749-9320-fee1166818f7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"138f8784-972f-4124-92a2-52c266958357","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:44002","PortSpecifier":{"PortValue":44002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"138f8784-972f-4124-92a2-52c266958357","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"138f8784-972f-4124-92a2-52c266958357","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:44002","PortSpecifier":{"PortValue":44002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094883,"nanos":388514340},"http":{"id":"138f8784-972f-4124-92a2-52c266958357","method":"POST","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"138f8784-972f-4124-92a2-52c266958357","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095183,"groups":["Engineering","Project-Alpha"],"iat":1781094883,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ad7c7307-28da-19ee-24b8-70e8f7db9741","preferred_username":"alice_lead","scope":"profile email","sid":"UdP-MHU3TQ4G422xq010jFCi","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"138f8784-972f-4124-92a2-52c266958357","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095183,"groups":["Engineering","Project-Alpha"],"iat":1781094883,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ad7c7307-28da-19ee-24b8-70e8f7db9741","preferred_username":"alice_lead","scope":"profile email","sid":"UdP-MHU3TQ4G422xq010jFCi","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"138f8784-972f-4124-92a2-52c266958357","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"138f8784-972f-4124-92a2-52c266958357","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"138f8784-972f-4124-92a2-52c266958357","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"138f8784-972f-4124-92a2-52c266958357","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"138f8784-972f-4124-92a2-52c266958357","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be482433-8752-4c75-892d-ac6ecb3bc5f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:42478","PortSpecifier":{"PortValue":42478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be482433-8752-4c75-892d-ac6ecb3bc5f1","method":"DELETE","path":"/maas-api/v1/api-keys/d6e1ec37-2eb7-475c-be9c-b5bd5e009d52","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be482433-8752-4c75-892d-ac6ecb3bc5f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:42478","PortSpecifier":{"PortValue":42478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094883,"nanos":414423633},"http":{"id":"be482433-8752-4c75-892d-ac6ecb3bc5f1","method":"DELETE","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/d6e1ec37-2eb7-475c-be9c-b5bd5e009d52",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be482433-8752-4c75-892d-ac6ecb3bc5f1","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095183,"groups":["Engineering","Project-Alpha"],"iat":1781094883,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ad7c7307-28da-19ee-24b8-70e8f7db9741","preferred_username":"alice_lead","scope":"profile email","sid":"UdP-MHU3TQ4G422xq010jFCi","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be482433-8752-4c75-892d-ac6ecb3bc5f1","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095183,"groups":["Engineering","Project-Alpha"],"iat":1781094883,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ad7c7307-28da-19ee-24b8-70e8f7db9741","preferred_username":"alice_lead","scope":"profile email","sid":"UdP-MHU3TQ4G422xq010jFCi","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/d6e1ec37-2eb7-475c-be9c-b5bd5e009d52",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be482433-8752-4c75-892d-ac6ecb3bc5f1","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be482433-8752-4c75-892d-ac6ecb3bc5f1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be482433-8752-4c75-892d-ac6ecb3bc5f1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be482433-8752-4c75-892d-ac6ecb3bc5f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be482433-8752-4c75-892d-ac6ecb3bc5f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9074db1b-cb5e-458e-8dad-9a6be20e08e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:6194","PortSpecifier":{"PortValue":6194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9074db1b-cb5e-458e-8dad-9a6be20e08e6","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9074db1b-cb5e-458e-8dad-9a6be20e08e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:6194","PortSpecifier":{"PortValue":6194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094886,"nanos":443639600},"http":{"id":"9074db1b-cb5e-458e-8dad-9a6be20e08e6","method":"GET","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9074db1b-cb5e-458e-8dad-9a6be20e08e6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-56cuZPxgyaQmHJbv_WikA6NU4R0aZCuiiUFMnvVGJGQtgKm7By1bxRylfcS5"}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9074db1b-cb5e-458e-8dad-9a6be20e08e6","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-56cuZPxgyaQmHJbv_WikA6NU4R0aZCuiiUFMnvVGJGQtgKm7By1bxRylfcS5\"}"}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9074db1b-cb5e-458e-8dad-9a6be20e08e6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9074db1b-cb5e-458e-8dad-9a6be20e08e6","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9074db1b-cb5e-458e-8dad-9a6be20e08e6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"no such key: username"}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9074db1b-cb5e-458e-8dad-9a6be20e08e6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"no such key: groups"}
{"level":"info","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9074db1b-cb5e-458e-8dad-9a6be20e08e6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9074db1b-cb5e-458e-8dad-9a6be20e08e6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76157911-7483-40fe-aa9c-53062362456f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:44008","PortSpecifier":{"PortValue":44008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76157911-7483-40fe-aa9c-53062362456f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76157911-7483-40fe-aa9c-53062362456f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:44008","PortSpecifier":{"PortValue":44008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094886,"nanos":571749181},"http":{"id":"76157911-7483-40fe-aa9c-53062362456f","method":"POST","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"76157911-7483-40fe-aa9c-53062362456f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"76157911-7483-40fe-aa9c-53062362456f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"76157911-7483-40fe-aa9c-53062362456f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"not authenticated"}
{"level":"info","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76157911-7483-40fe-aa9c-53062362456f","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}"}}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76157911-7483-40fe-aa9c-53062362456f","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}}
{"level":"info","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0bacadd-8254-453c-862f-482539292f37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:7180","PortSpecifier":{"PortValue":7180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0bacadd-8254-453c-862f-482539292f37","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0bacadd-8254-453c-862f-482539292f37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:7180","PortSpecifier":{"PortValue":7180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094886,"nanos":729655272},"http":{"id":"c0bacadd-8254-453c-862f-482539292f37","method":"POST","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0bacadd-8254-453c-862f-482539292f37","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095186,"groups":["Engineering","Project-Alpha"],"iat":1781094886,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:11930ec0-2203-3373-c3e4-b4965728640a","preferred_username":"alice_lead","scope":"profile email","sid":"6gXRVRIU7-Hz4WpBe53t41Pr","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0bacadd-8254-453c-862f-482539292f37","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095186,"groups":["Engineering","Project-Alpha"],"iat":1781094886,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:11930ec0-2203-3373-c3e4-b4965728640a","preferred_username":"alice_lead","scope":"profile email","sid":"6gXRVRIU7-Hz4WpBe53t41Pr","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0bacadd-8254-453c-862f-482539292f37","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0bacadd-8254-453c-862f-482539292f37","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0bacadd-8254-453c-862f-482539292f37","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0bacadd-8254-453c-862f-482539292f37","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0bacadd-8254-453c-862f-482539292f37","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54dd4ac9-86ca-4929-a8ce-4c8b5cdc9a8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:42494","PortSpecifier":{"PortValue":42494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54dd4ac9-86ca-4929-a8ce-4c8b5cdc9a8c","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54dd4ac9-86ca-4929-a8ce-4c8b5cdc9a8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:42494","PortSpecifier":{"PortValue":42494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094886,"nanos":755482556},"http":{"id":"54dd4ac9-86ca-4929-a8ce-4c8b5cdc9a8c","method":"POST","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54dd4ac9-86ca-4929-a8ce-4c8b5cdc9a8c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095186,"groups":["Site-Reliability"],"iat":1781094886,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:c792012a-50e6-81f8-382b-59f99d0e073f","preferred_username":"bob_sre","scope":"profile email","sid":"bpIEj0fa5-vY7u214w-XkopC","sub":"53b3037b-10d0-4a11-929f-6ec74effaa7a","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54dd4ac9-86ca-4929-a8ce-4c8b5cdc9a8c","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095186,"groups":["Site-Reliability"],"iat":1781094886,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:c792012a-50e6-81f8-382b-59f99d0e073f","preferred_username":"bob_sre","scope":"profile email","sid":"bpIEj0fa5-vY7u214w-XkopC","sub":"53b3037b-10d0-4a11-929f-6ec74effaa7a","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54dd4ac9-86ca-4929-a8ce-4c8b5cdc9a8c","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54dd4ac9-86ca-4929-a8ce-4c8b5cdc9a8c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54dd4ac9-86ca-4929-a8ce-4c8b5cdc9a8c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"}
{"level":"info","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54dd4ac9-86ca-4929-a8ce-4c8b5cdc9a8c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54dd4ac9-86ca-4929-a8ce-4c8b5cdc9a8c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce3c1553-d98d-463e-9c4f-6d11de8e98c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:6196","PortSpecifier":{"PortValue":6196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce3c1553-d98d-463e-9c4f-6d11de8e98c7","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce3c1553-d98d-463e-9c4f-6d11de8e98c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:6196","PortSpecifier":{"PortValue":6196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094886,"nanos":846938702},"http":{"id":"ce3c1553-d98d-463e-9c4f-6d11de8e98c7","method":"POST","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce3c1553-d98d-463e-9c4f-6d11de8e98c7","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095186,"groups":["Engineering","Project-Alpha"],"iat":1781094886,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:bafac670-84f0-c9c1-21da-ecb011a64742","preferred_username":"alice_lead","scope":"profile email","sid":"2FnPjNvCALNmmZ3pHyNvsvj8","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce3c1553-d98d-463e-9c4f-6d11de8e98c7","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095186,"groups":["Engineering","Project-Alpha"],"iat":1781094886,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:bafac670-84f0-c9c1-21da-ecb011a64742","preferred_username":"alice_lead","scope":"profile email","sid":"2FnPjNvCALNmmZ3pHyNvsvj8","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce3c1553-d98d-463e-9c4f-6d11de8e98c7","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce3c1553-d98d-463e-9c4f-6d11de8e98c7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce3c1553-d98d-463e-9c4f-6d11de8e98c7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce3c1553-d98d-463e-9c4f-6d11de8e98c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce3c1553-d98d-463e-9c4f-6d11de8e98c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fdd9417-7f2c-4a4d-80a0-542ab132caea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:44020","PortSpecifier":{"PortValue":44020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4fdd9417-7f2c-4a4d-80a0-542ab132caea","method":"DELETE","path":"/maas-api/v1/api-keys/219d79ae-dc7b-4b42-9773-f0b272351a14","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fdd9417-7f2c-4a4d-80a0-542ab132caea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:44020","PortSpecifier":{"PortValue":44020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094886,"nanos":876623139},"http":{"id":"4fdd9417-7f2c-4a4d-80a0-542ab132caea","method":"DELETE","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/219d79ae-dc7b-4b42-9773-f0b272351a14",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4fdd9417-7f2c-4a4d-80a0-542ab132caea","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095186,"groups":["Engineering","Project-Alpha"],"iat":1781094886,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:bafac670-84f0-c9c1-21da-ecb011a64742","preferred_username":"alice_lead","scope":"profile email","sid":"2FnPjNvCALNmmZ3pHyNvsvj8","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4fdd9417-7f2c-4a4d-80a0-542ab132caea","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095186,"groups":["Engineering","Project-Alpha"],"iat":1781094886,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:bafac670-84f0-c9c1-21da-ecb011a64742","preferred_username":"alice_lead","scope":"profile email","sid":"2FnPjNvCALNmmZ3pHyNvsvj8","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/219d79ae-dc7b-4b42-9773-f0b272351a14",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fdd9417-7f2c-4a4d-80a0-542ab132caea","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fdd9417-7f2c-4a4d-80a0-542ab132caea","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fdd9417-7f2c-4a4d-80a0-542ab132caea","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fdd9417-7f2c-4a4d-80a0-542ab132caea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fdd9417-7f2c-4a4d-80a0-542ab132caea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e90e5cfa-7446-4b43-ad3a-1096bdf04021","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:42498","PortSpecifier":{"PortValue":42498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e90e5cfa-7446-4b43-ad3a-1096bdf04021","method":"DELETE","path":"/maas-api/v1/api-keys/219d79ae-dc7b-4b42-9773-f0b272351a14","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e90e5cfa-7446-4b43-ad3a-1096bdf04021","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:42498","PortSpecifier":{"PortValue":42498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094886,"nanos":901357949},"http":{"id":"e90e5cfa-7446-4b43-ad3a-1096bdf04021","method":"DELETE","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/219d79ae-dc7b-4b42-9773-f0b272351a14",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e90e5cfa-7446-4b43-ad3a-1096bdf04021","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095186,"groups":["Engineering","Project-Alpha"],"iat":1781094886,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:bafac670-84f0-c9c1-21da-ecb011a64742","preferred_username":"alice_lead","scope":"profile email","sid":"2FnPjNvCALNmmZ3pHyNvsvj8","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e90e5cfa-7446-4b43-ad3a-1096bdf04021","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095186,"groups":["Engineering","Project-Alpha"],"iat":1781094886,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:bafac670-84f0-c9c1-21da-ecb011a64742","preferred_username":"alice_lead","scope":"profile email","sid":"2FnPjNvCALNmmZ3pHyNvsvj8","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/219d79ae-dc7b-4b42-9773-f0b272351a14",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e90e5cfa-7446-4b43-ad3a-1096bdf04021","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e90e5cfa-7446-4b43-ad3a-1096bdf04021","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e90e5cfa-7446-4b43-ad3a-1096bdf04021","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e90e5cfa-7446-4b43-ad3a-1096bdf04021","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e90e5cfa-7446-4b43-ad3a-1096bdf04021","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efb4bd3c-5295-47e5-a33b-cf90e785bb81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:35402","PortSpecifier":{"PortValue":35402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"efb4bd3c-5295-47e5-a33b-cf90e785bb81","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efb4bd3c-5295-47e5-a33b-cf90e785bb81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:35402","PortSpecifier":{"PortValue":35402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094886,"nanos":993724056},"http":{"id":"efb4bd3c-5295-47e5-a33b-cf90e785bb81","method":"POST","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"efb4bd3c-5295-47e5-a33b-cf90e785bb81","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095186,"groups":["Engineering","Project-Alpha"],"iat":1781094886,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:e203b44c-c72f-12b9-2663-968a46d8624a","preferred_username":"alice_lead","scope":"profile email","sid":"2HwbWwMwKxpSAbM72CNWEyM1","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"efb4bd3c-5295-47e5-a33b-cf90e785bb81","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095186,"groups":["Engineering","Project-Alpha"],"iat":1781094886,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:e203b44c-c72f-12b9-2663-968a46d8624a","preferred_username":"alice_lead","scope":"profile email","sid":"2HwbWwMwKxpSAbM72CNWEyM1","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efb4bd3c-5295-47e5-a33b-cf90e785bb81","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efb4bd3c-5295-47e5-a33b-cf90e785bb81","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efb4bd3c-5295-47e5-a33b-cf90e785bb81","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efb4bd3c-5295-47e5-a33b-cf90e785bb81","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efb4bd3c-5295-47e5-a33b-cf90e785bb81","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43294724-6e08-4f32-9bb5-e33483ce042b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:14828","PortSpecifier":{"PortValue":14828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43294724-6e08-4f32-9bb5-e33483ce042b","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43294724-6e08-4f32-9bb5-e33483ce042b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:14828","PortSpecifier":{"PortValue":14828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094887,"nanos":20316980},"http":{"id":"43294724-6e08-4f32-9bb5-e33483ce042b","method":"GET","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43294724-6e08-4f32-9bb5-e33483ce042b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2pKrRnYECf4nTYm8_y6hSEwkxJxIK7ZXWdYESgD6VelqWXqFLnQXi3GnIzuD"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43294724-6e08-4f32-9bb5-e33483ce042b","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2pKrRnYECf4nTYm8_y6hSEwkxJxIK7ZXWdYESgD6VelqWXqFLnQXi3GnIzuD\"}"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43294724-6e08-4f32-9bb5-e33483ce042b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43294724-6e08-4f32-9bb5-e33483ce042b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43294724-6e08-4f32-9bb5-e33483ce042b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43294724-6e08-4f32-9bb5-e33483ce042b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43294724-6e08-4f32-9bb5-e33483ce042b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43294724-6e08-4f32-9bb5-e33483ce042b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43294724-6e08-4f32-9bb5-e33483ce042b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3383e2fa-6400-4c69-9f3c-45bd034ab1e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:48100","PortSpecifier":{"PortValue":48100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3383e2fa-6400-4c69-9f3c-45bd034ab1e0","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3383e2fa-6400-4c69-9f3c-45bd034ab1e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:48100","PortSpecifier":{"PortValue":48100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094887,"nanos":35204184},"http":{"id":"3383e2fa-6400-4c69-9f3c-45bd034ab1e0","method":"GET","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3383e2fa-6400-4c69-9f3c-45bd034ab1e0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2pKrRnYECf4nTYm8_y6hSEwkxJxIK7ZXWdYESgD6VelqWXqFLnQXi3GnIzuD"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3383e2fa-6400-4c69-9f3c-45bd034ab1e0","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2pKrRnYECf4nTYm8_y6hSEwkxJxIK7ZXWdYESgD6VelqWXqFLnQXi3GnIzuD\"}"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3383e2fa-6400-4c69-9f3c-45bd034ab1e0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3383e2fa-6400-4c69-9f3c-45bd034ab1e0","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3383e2fa-6400-4c69-9f3c-45bd034ab1e0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3383e2fa-6400-4c69-9f3c-45bd034ab1e0","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-2pKrRnYECf4nTYm8_y6hSEwkxJxIK7ZXWdYESgD6VelqWXqFLnQXi3GnIzuD","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.52","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.35~maas-default-gateway-openshift-default-687ff6996-7mcwg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.132.0.52","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"3383e2fa-6400-4c69-9f3c-45bd034ab1e0"},"host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","id":"3383e2fa-6400-4c69-9f3c-45bd034ab1e0","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":35204184,"seconds":1781094887},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.132.0.52:48100","port":48100}}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3383e2fa-6400-4c69-9f3c-45bd034ab1e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3383e2fa-6400-4c69-9f3c-45bd034ab1e0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3383e2fa-6400-4c69-9f3c-45bd034ab1e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3383e2fa-6400-4c69-9f3c-45bd034ab1e0","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3383e2fa-6400-4c69-9f3c-45bd034ab1e0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3383e2fa-6400-4c69-9f3c-45bd034ab1e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"9722f518-d327-45d6-9ea8-d8bcec380657","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3383e2fa-6400-4c69-9f3c-45bd034ab1e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3383e2fa-6400-4c69-9f3c-45bd034ab1e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26b683fd-52bb-4a81-8e9b-e8c244ce823e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:6202","PortSpecifier":{"PortValue":6202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26b683fd-52bb-4a81-8e9b-e8c244ce823e","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26b683fd-52bb-4a81-8e9b-e8c244ce823e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:6202","PortSpecifier":{"PortValue":6202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094887,"nanos":121686242},"http":{"id":"26b683fd-52bb-4a81-8e9b-e8c244ce823e","method":"POST","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26b683fd-52bb-4a81-8e9b-e8c244ce823e","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095187,"groups":["Engineering","Project-Alpha"],"iat":1781094887,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:a74d4cd2-0c16-72b2-8b07-54429bf3fdc9","preferred_username":"alice_lead","scope":"profile email","sid":"lPCBLHiAV3HHK31OA_f9Gdo2","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26b683fd-52bb-4a81-8e9b-e8c244ce823e","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095187,"groups":["Engineering","Project-Alpha"],"iat":1781094887,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:a74d4cd2-0c16-72b2-8b07-54429bf3fdc9","preferred_username":"alice_lead","scope":"profile email","sid":"lPCBLHiAV3HHK31OA_f9Gdo2","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26b683fd-52bb-4a81-8e9b-e8c244ce823e","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26b683fd-52bb-4a81-8e9b-e8c244ce823e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26b683fd-52bb-4a81-8e9b-e8c244ce823e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26b683fd-52bb-4a81-8e9b-e8c244ce823e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26b683fd-52bb-4a81-8e9b-e8c244ce823e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3e0ff4b-a92a-431e-b0ec-065029b091fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:7196","PortSpecifier":{"PortValue":7196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3e0ff4b-a92a-431e-b0ec-065029b091fa","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3e0ff4b-a92a-431e-b0ec-065029b091fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:7196","PortSpecifier":{"PortValue":7196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094887,"nanos":149033507},"http":{"id":"e3e0ff4b-a92a-431e-b0ec-065029b091fa","method":"GET","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3e0ff4b-a92a-431e-b0ec-065029b091fa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LufrD8IXrWjuP8ms_eKwuQbI5TadHbJOcAlaYaMfnfx5rHYzba8A0uPDHOZF"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3e0ff4b-a92a-431e-b0ec-065029b091fa","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LufrD8IXrWjuP8ms_eKwuQbI5TadHbJOcAlaYaMfnfx5rHYzba8A0uPDHOZF\"}"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3e0ff4b-a92a-431e-b0ec-065029b091fa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3e0ff4b-a92a-431e-b0ec-065029b091fa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e0ff4b-a92a-431e-b0ec-065029b091fa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e0ff4b-a92a-431e-b0ec-065029b091fa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e0ff4b-a92a-431e-b0ec-065029b091fa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3e0ff4b-a92a-431e-b0ec-065029b091fa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3e0ff4b-a92a-431e-b0ec-065029b091fa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9820998-2aac-435b-b3cd-6a734455db4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:44026","PortSpecifier":{"PortValue":44026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9820998-2aac-435b-b3cd-6a734455db4d","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9820998-2aac-435b-b3cd-6a734455db4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:44026","PortSpecifier":{"PortValue":44026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094887,"nanos":175321625},"http":{"id":"e9820998-2aac-435b-b3cd-6a734455db4d","method":"GET","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9820998-2aac-435b-b3cd-6a734455db4d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LufrD8IXrWjuP8ms_eKwuQbI5TadHbJOcAlaYaMfnfx5rHYzba8A0uPDHOZF"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9820998-2aac-435b-b3cd-6a734455db4d","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LufrD8IXrWjuP8ms_eKwuQbI5TadHbJOcAlaYaMfnfx5rHYzba8A0uPDHOZF\"}"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9820998-2aac-435b-b3cd-6a734455db4d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9820998-2aac-435b-b3cd-6a734455db4d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9820998-2aac-435b-b3cd-6a734455db4d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9820998-2aac-435b-b3cd-6a734455db4d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9820998-2aac-435b-b3cd-6a734455db4d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9820998-2aac-435b-b3cd-6a734455db4d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9820998-2aac-435b-b3cd-6a734455db4d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5733fc1-af31-4fd3-969e-7db4098975ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:48100","PortSpecifier":{"PortValue":48100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5733fc1-af31-4fd3-969e-7db4098975ac","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5733fc1-af31-4fd3-969e-7db4098975ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:48100","PortSpecifier":{"PortValue":48100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094887,"nanos":180806331},"http":{"id":"a5733fc1-af31-4fd3-969e-7db4098975ac","method":"GET","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5733fc1-af31-4fd3-969e-7db4098975ac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LufrD8IXrWjuP8ms_eKwuQbI5TadHbJOcAlaYaMfnfx5rHYzba8A0uPDHOZF"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a5733fc1-af31-4fd3-969e-7db4098975ac","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LufrD8IXrWjuP8ms_eKwuQbI5TadHbJOcAlaYaMfnfx5rHYzba8A0uPDHOZF\"}"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a5733fc1-af31-4fd3-969e-7db4098975ac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a5733fc1-af31-4fd3-969e-7db4098975ac","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a5733fc1-af31-4fd3-969e-7db4098975ac","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5733fc1-af31-4fd3-969e-7db4098975ac","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-1LufrD8IXrWjuP8ms_eKwuQbI5TadHbJOcAlaYaMfnfx5rHYzba8A0uPDHOZF","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.52","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.35~maas-default-gateway-openshift-default-687ff6996-7mcwg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.132.0.52","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"a5733fc1-af31-4fd3-969e-7db4098975ac"},"host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","id":"a5733fc1-af31-4fd3-969e-7db4098975ac","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":180806331,"seconds":1781094887},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.132.0.52:48100","port":48100}}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5733fc1-af31-4fd3-969e-7db4098975ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5733fc1-af31-4fd3-969e-7db4098975ac","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5733fc1-af31-4fd3-969e-7db4098975ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5733fc1-af31-4fd3-969e-7db4098975ac","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5733fc1-af31-4fd3-969e-7db4098975ac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5733fc1-af31-4fd3-969e-7db4098975ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"e8e9a712-91e6-4b93-8763-77a56ecd6e0b","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5733fc1-af31-4fd3-969e-7db4098975ac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5733fc1-af31-4fd3-969e-7db4098975ac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3788005c-73f5-40f2-a79a-7fa41bdcd0e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:45252","PortSpecifier":{"PortValue":45252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3788005c-73f5-40f2-a79a-7fa41bdcd0e1","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3788005c-73f5-40f2-a79a-7fa41bdcd0e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:45252","PortSpecifier":{"PortValue":45252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094887,"nanos":270629257},"http":{"id":"3788005c-73f5-40f2-a79a-7fa41bdcd0e1","method":"POST","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3788005c-73f5-40f2-a79a-7fa41bdcd0e1","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095187,"groups":["Engineering","Project-Alpha"],"iat":1781094887,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7a01dacf-1263-797f-9f5e-9f77a50b82f6","preferred_username":"alice_lead","scope":"profile email","sid":"bBF7-__5P7gOjdq1RTBLnt_c","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3788005c-73f5-40f2-a79a-7fa41bdcd0e1","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095187,"groups":["Engineering","Project-Alpha"],"iat":1781094887,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7a01dacf-1263-797f-9f5e-9f77a50b82f6","preferred_username":"alice_lead","scope":"profile email","sid":"bBF7-__5P7gOjdq1RTBLnt_c","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3788005c-73f5-40f2-a79a-7fa41bdcd0e1","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3788005c-73f5-40f2-a79a-7fa41bdcd0e1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3788005c-73f5-40f2-a79a-7fa41bdcd0e1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3788005c-73f5-40f2-a79a-7fa41bdcd0e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3788005c-73f5-40f2-a79a-7fa41bdcd0e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96f5f3cb-1050-447d-ab00-7bc069aff66e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:42512","PortSpecifier":{"PortValue":42512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96f5f3cb-1050-447d-ab00-7bc069aff66e","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96f5f3cb-1050-447d-ab00-7bc069aff66e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:42512","PortSpecifier":{"PortValue":42512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094887,"nanos":295178408},"http":{"id":"96f5f3cb-1050-447d-ab00-7bc069aff66e","method":"GET","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96f5f3cb-1050-447d-ab00-7bc069aff66e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-slgjs5Sd0bySf2xb_kbXlGOpBvBVyHdx4Jo17l7a6UEKfetbgChBQaYmKkwS"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96f5f3cb-1050-447d-ab00-7bc069aff66e","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-slgjs5Sd0bySf2xb_kbXlGOpBvBVyHdx4Jo17l7a6UEKfetbgChBQaYmKkwS\"}"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96f5f3cb-1050-447d-ab00-7bc069aff66e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96f5f3cb-1050-447d-ab00-7bc069aff66e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96f5f3cb-1050-447d-ab00-7bc069aff66e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96f5f3cb-1050-447d-ab00-7bc069aff66e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96f5f3cb-1050-447d-ab00-7bc069aff66e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96f5f3cb-1050-447d-ab00-7bc069aff66e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96f5f3cb-1050-447d-ab00-7bc069aff66e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90561579-fec4-44c4-a3e9-7594cf010b00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:48100","PortSpecifier":{"PortValue":48100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90561579-fec4-44c4-a3e9-7594cf010b00","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90561579-fec4-44c4-a3e9-7594cf010b00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:48100","PortSpecifier":{"PortValue":48100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094887,"nanos":300374959},"http":{"id":"90561579-fec4-44c4-a3e9-7594cf010b00","method":"GET","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90561579-fec4-44c4-a3e9-7594cf010b00","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-slgjs5Sd0bySf2xb_kbXlGOpBvBVyHdx4Jo17l7a6UEKfetbgChBQaYmKkwS"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"90561579-fec4-44c4-a3e9-7594cf010b00","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-slgjs5Sd0bySf2xb_kbXlGOpBvBVyHdx4Jo17l7a6UEKfetbgChBQaYmKkwS\"}"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"90561579-fec4-44c4-a3e9-7594cf010b00","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"90561579-fec4-44c4-a3e9-7594cf010b00","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"90561579-fec4-44c4-a3e9-7594cf010b00","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90561579-fec4-44c4-a3e9-7594cf010b00","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-slgjs5Sd0bySf2xb_kbXlGOpBvBVyHdx4Jo17l7a6UEKfetbgChBQaYmKkwS","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.52","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.35~maas-default-gateway-openshift-default-687ff6996-7mcwg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.132.0.52","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"90561579-fec4-44c4-a3e9-7594cf010b00"},"host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","id":"90561579-fec4-44c4-a3e9-7594cf010b00","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":300374959,"seconds":1781094887},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.132.0.52:48100","port":48100}}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90561579-fec4-44c4-a3e9-7594cf010b00","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90561579-fec4-44c4-a3e9-7594cf010b00","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90561579-fec4-44c4-a3e9-7594cf010b00","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90561579-fec4-44c4-a3e9-7594cf010b00","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90561579-fec4-44c4-a3e9-7594cf010b00","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90561579-fec4-44c4-a3e9-7594cf010b00","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"2593d443-0ea1-4721-a7e4-163b99d258cb","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90561579-fec4-44c4-a3e9-7594cf010b00","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90561579-fec4-44c4-a3e9-7594cf010b00","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd94ac40-976c-4276-8b7b-3461f3c1814a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:6210","PortSpecifier":{"PortValue":6210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd94ac40-976c-4276-8b7b-3461f3c1814a","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd94ac40-976c-4276-8b7b-3461f3c1814a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:6210","PortSpecifier":{"PortValue":6210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094887,"nanos":328639815},"http":{"id":"bd94ac40-976c-4276-8b7b-3461f3c1814a","method":"GET","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd94ac40-976c-4276-8b7b-3461f3c1814a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-slgjs5Sd0bySf2xb_kbXlGOpBvBVyHdx4Jo17l7a6UEKfetbgChBQaYmKkwS"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bd94ac40-976c-4276-8b7b-3461f3c1814a","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-slgjs5Sd0bySf2xb_kbXlGOpBvBVyHdx4Jo17l7a6UEKfetbgChBQaYmKkwS\"}"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bd94ac40-976c-4276-8b7b-3461f3c1814a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd94ac40-976c-4276-8b7b-3461f3c1814a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd94ac40-976c-4276-8b7b-3461f3c1814a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd94ac40-976c-4276-8b7b-3461f3c1814a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd94ac40-976c-4276-8b7b-3461f3c1814a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd94ac40-976c-4276-8b7b-3461f3c1814a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd94ac40-976c-4276-8b7b-3461f3c1814a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec4f2e56-47d4-4b86-94c0-771dc99bc971","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:48100","PortSpecifier":{"PortValue":48100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec4f2e56-47d4-4b86-94c0-771dc99bc971","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec4f2e56-47d4-4b86-94c0-771dc99bc971","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:48100","PortSpecifier":{"PortValue":48100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094887,"nanos":334687694},"http":{"id":"ec4f2e56-47d4-4b86-94c0-771dc99bc971","method":"GET","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec4f2e56-47d4-4b86-94c0-771dc99bc971","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-slgjs5Sd0bySf2xb_kbXlGOpBvBVyHdx4Jo17l7a6UEKfetbgChBQaYmKkwS"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ec4f2e56-47d4-4b86-94c0-771dc99bc971","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-slgjs5Sd0bySf2xb_kbXlGOpBvBVyHdx4Jo17l7a6UEKfetbgChBQaYmKkwS\"}"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ec4f2e56-47d4-4b86-94c0-771dc99bc971","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ec4f2e56-47d4-4b86-94c0-771dc99bc971","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ec4f2e56-47d4-4b86-94c0-771dc99bc971","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec4f2e56-47d4-4b86-94c0-771dc99bc971","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-slgjs5Sd0bySf2xb_kbXlGOpBvBVyHdx4Jo17l7a6UEKfetbgChBQaYmKkwS","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.52","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.35~maas-default-gateway-openshift-default-687ff6996-7mcwg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.132.0.52","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"ec4f2e56-47d4-4b86-94c0-771dc99bc971"},"host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","id":"ec4f2e56-47d4-4b86-94c0-771dc99bc971","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":334687694,"seconds":1781094887},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.132.0.52:48100","port":48100}}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec4f2e56-47d4-4b86-94c0-771dc99bc971","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec4f2e56-47d4-4b86-94c0-771dc99bc971","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec4f2e56-47d4-4b86-94c0-771dc99bc971","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec4f2e56-47d4-4b86-94c0-771dc99bc971","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec4f2e56-47d4-4b86-94c0-771dc99bc971","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec4f2e56-47d4-4b86-94c0-771dc99bc971","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"2593d443-0ea1-4721-a7e4-163b99d258cb","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec4f2e56-47d4-4b86-94c0-771dc99bc971","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec4f2e56-47d4-4b86-94c0-771dc99bc971","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6349d638-6e9f-4a96-9d3e-7a312c7ec7a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:44036","PortSpecifier":{"PortValue":44036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6349d638-6e9f-4a96-9d3e-7a312c7ec7a1","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6349d638-6e9f-4a96-9d3e-7a312c7ec7a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:44036","PortSpecifier":{"PortValue":44036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781094887,"nanos":433734366},"http":{"id":"6349d638-6e9f-4a96-9d3e-7a312c7ec7a1","method":"POST","headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6349d638-6e9f-4a96-9d3e-7a312c7ec7a1","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095187,"groups":["Engineering","Project-Alpha"],"iat":1781094887,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2bd3375e-837e-8936-17fe-2129774fd017","preferred_username":"alice_lead","scope":"profile email","sid":"f_SJwyx-fKXydB7pePR2fKtM","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6349d638-6e9f-4a96-9d3e-7a312c7ec7a1","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781095187,"groups":["Engineering","Project-Alpha"],"iat":1781094887,"iss":"https://keycloak.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2bd3375e-837e-8936-17fe-2129774fd017","preferred_username":"alice_lead","scope":"profile email","sid":"f_SJwyx-fKXydB7pePR2fKtM","sub":"c281f8ef-46e5-41cc-9c93-5cbf1ffd2db9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3ed65e0-9f20-4071-9931-07d988144793.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6349d638-6e9f-4a96-9d3e-7a312c7ec7a1","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6349d638-6e9f-4a96-9d3e-7a312c7ec7a1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6349d638-6e9f-4a96-9d3e-7a312c7ec7a1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6349d638-6e9f-4a96-9d3e-7a312c7ec7a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T12:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6349d638-6e9f-4a96-9d3e-7a312c7ec7a1","authorized":true,"response":"OK"}