--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino","msg":"setting instance base logger","min level":"debug","mode":"production"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino","msg":"build information","version":"0.24.0","commit":"5d6a7135ce05dc530d2e5ffeaffb9f38f3732bb0","dirty":"false","cmd":"server"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino","msg":"setting up with options","allow-superseding-host-subsets":"true","auth-config-label-selector":"","deep-metrics-enabled":"false","enable-leader-election":"false","evaluator-cache-size":"1","ext-auth-grpc-port":"50051","ext-auth-http-port":"5001","health-probe-addr":":8081","kube-client-burst":"30","kube-client-qps":"20","log-level":"debug","log-mode":"production","max-http-request-body-size":"8192","metrics-addr":":8080","oidc-http-port":"8083","oidc-tls-cert":"","oidc-tls-cert-key":"","secret-label-selector":"authorino.kuadrant.io/managed-by=authorino","timeout":"0","tls-cert":"/etc/ssl/certs/tls.crt","tls-cert-key":"/etc/ssl/private/tls.key","tracing-service-endpoint":"","tracing-service-insecure":"false","tracing-service-tag":"[]","watch-namespace":"","webhook-service-port":"9443"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino","msg":"starting grpc auth service","port":50051,"tls":true}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino","msg":"starting http auth service","port":5001,"tls":true}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino","msg":"starting http oidc service","port":8083,"tls":false}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino","msg":"starting reconciliation manager"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino","msg":"starting status update manager"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino","msg":"starting server","kind":"health probe","addr":"[::]:8081"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.metrics","msg":"Starting metrics server"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino","msg":"Starting EventSource","controller":"authconfig","controllerGroup":"authorino.kuadrant.io","controllerKind":"AuthConfig","source":"kind source: *v1beta3.AuthConfig"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.metrics","msg":"Serving metrics server","bindAddress":":8080","secure":false}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino","msg":"Starting Controller","controller":"authconfig","controllerGroup":"authorino.kuadrant.io","controllerKind":"AuthConfig"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino","msg":"Starting EventSource","controller":"authconfig","controllerGroup":"authorino.kuadrant.io","controllerKind":"AuthConfig","source":"kind source: *v1beta3.AuthConfig"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino","msg":"Starting Controller","controller":"authconfig","controllerGroup":"authorino.kuadrant.io","controllerKind":"AuthConfig"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino","msg":"Starting EventSource","controller":"secret","controllerGroup":"","controllerKind":"Secret","source":"kind source: *v1.Secret"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino","msg":"Starting Controller","controller":"secret","controllerGroup":"","controllerKind":"Secret"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino","msg":"Starting workers","controller":"authconfig","controllerGroup":"authorino.kuadrant.io","controllerKind":"AuthConfig","worker count":1}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino","msg":"Starting workers","controller":"authconfig","controllerGroup":"authorino.kuadrant.io","controllerKind":"AuthConfig","worker count":1}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building the index","count":26}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/c9f2cdb36f800bc8ef8831e6117ec4c6cc521d8cd63b718b7906225d0f25e59f"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/5fea747cb803a5ee3aeb620187bd9ec74ccccd10a92474ef528215a7ff146c8f"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/bf72a6316f6ed79299511e58d068836cdc71dbca5e23944f783c9340ffa0aee1"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/319a353672fc7601c875fa3f8b807adf60b64f093f022b2a1c3dfef3ac8cd4f4"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/df733b2c652bfe2458c9e19932b1091e939c1a62178d6879462b3b4f73fca4bb"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino","msg":"Starting workers","controller":"secret","controllerGroup":"","controllerKind":"Secret","worker count":1}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf72a6316f6ed79299511e58d068836cdc71dbca5e23944f783c9340ffa0aee1"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df733b2c652bfe2458c9e19932b1091e939c1a62178d6879462b3b4f73fca4bb"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319a353672fc7601c875fa3f8b807adf60b64f093f022b2a1c3dfef3ac8cd4f4"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fea747cb803a5ee3aeb620187bd9ec74ccccd10a92474ef528215a7ff146c8f"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fea747cb803a5ee3aeb620187bd9ec74ccccd10a92474ef528215a7ff146c8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9f2cdb36f800bc8ef8831e6117ec4c6cc521d8cd63b718b7906225d0f25e59f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9f2cdb36f800bc8ef8831e6117ec4c6cc521d8cd63b718b7906225d0f25e59f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"319a353672fc7601c875fa3f8b807adf60b64f093f022b2a1c3dfef3ac8cd4f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"openid connect configuration updated","authconfig":"kuadrant-system/4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d","issuerUrl":"https://keycloak.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com/realms/tenant-a"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"auto-refresh of openid connect configuration disabled","authconfig":"kuadrant-system/4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d","reason":"interval must be greater than zero"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"openid connect configuration updated","authconfig":"kuadrant-system/c9f2cdb36f800bc8ef8831e6117ec4c6cc521d8cd63b718b7906225d0f25e59f","issuerUrl":"https://keycloak.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com/realms/tenant-a"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"auto-refresh of openid connect configuration disabled","authconfig":"kuadrant-system/c9f2cdb36f800bc8ef8831e6117ec4c6cc521d8cd63b718b7906225d0f25e59f","reason":"interval must be greater than zero"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9f2cdb36f800bc8ef8831e6117ec4c6cc521d8cd63b718b7906225d0f25e59f"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf72a6316f6ed79299511e58d068836cdc71dbca5e23944f783c9340ffa0aee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df733b2c652bfe2458c9e19932b1091e939c1a62178d6879462b3b4f73fca4bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f2cdb36f800bc8ef8831e6117ec4c6cc521d8cd63b718b7906225d0f25e59f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"openid connect configuration updated","authconfig":"kuadrant-system/4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d","issuerUrl":"https://keycloak.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com/realms/tenant-a"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"auto-refresh of openid connect configuration disabled","authconfig":"kuadrant-system/4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d","reason":"interval must be greater than zero"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:08:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"],"numHostsReady":"1/1","numIdentitySources":3,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"openid connect configuration updated","authconfig":"kuadrant-system/4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d","issuerUrl":"https://keycloak.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com/realms/tenant-a"}
{"level":"debug","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"auto-refresh of openid connect configuration disabled","authconfig":"kuadrant-system/4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d","reason":"interval must be greater than zero"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"}
{"level":"info","ts":"2026-06-09T10:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T10:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"}
{"level":"debug","ts":"2026-06-09T10:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"}
{"level":"debug","ts":"2026-06-09T10:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"}
{"level":"debug","ts":"2026-06-09T10:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"}
{"level":"info","ts":"2026-06-09T10:08:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"628615ec-822f-49bb-bcd1-6db1641ab97a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:2846","PortSpecifier":{"PortValue":2846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"628615ec-822f-49bb-bcd1-6db1641ab97a","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"628615ec-822f-49bb-bcd1-6db1641ab97a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:2846","PortSpecifier":{"PortValue":2846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999693,"nanos":222701102},"http":{"id":"628615ec-822f-49bb-bcd1-6db1641ab97a","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"628615ec-822f-49bb-bcd1-6db1641ab97a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"628615ec-822f-49bb-bcd1-6db1641ab97a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"628615ec-822f-49bb-bcd1-6db1641ab97a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"2f2bb49a-73a8-49a3-a032-0ac512e20221","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=85b653d0-9950-4b55-b7e1-1ba6e363ca24"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"628615ec-822f-49bb-bcd1-6db1641ab97a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=85b653d0-9950-4b55-b7e1-1ba6e363ca24"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"2f2bb49a-73a8-49a3-a032-0ac512e20221","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","authorization":"Bearer **** ****REDACTED_JWT****","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"maas-api.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.43~maas-default-gateway-openshift-default-687ff6996-7nlx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-request-id":"628615ec-822f-49bb-bcd1-6db1641ab97a"},"host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","id":"628615ec-822f-49bb-bcd1-6db1641ab97a","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/2","scheme":"https","time":{"nanos":222701102,"seconds":1780999693},"url_path":"/maas-api/v1/api-keys","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.2:2846","port":2846}}}
{"level":"debug","ts":"2026-06-09T10:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"628615ec-822f-49bb-bcd1-6db1641ab97a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"}
{"level":"debug","ts":"2026-06-09T10:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"628615ec-822f-49bb-bcd1-6db1641ab97a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"628615ec-822f-49bb-bcd1-6db1641ab97a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"628615ec-822f-49bb-bcd1-6db1641ab97a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d57d834d-27ac-4004-9e3f-0979a731a5f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:58742","PortSpecifier":{"PortValue":58742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d57d834d-27ac-4004-9e3f-0979a731a5f5","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d57d834d-27ac-4004-9e3f-0979a731a5f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:58742","PortSpecifier":{"PortValue":58742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999725,"nanos":637654285},"http":{"id":"d57d834d-27ac-4004-9e3f-0979a731a5f5","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"d57d834d-27ac-4004-9e3f-0979a731a5f5","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d57d834d-27ac-4004-9e3f-0979a731a5f5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d57d834d-27ac-4004-9e3f-0979a731a5f5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"2f2bb49a-73a8-49a3-a032-0ac512e20221","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=85b653d0-9950-4b55-b7e1-1ba6e363ca24"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d57d834d-27ac-4004-9e3f-0979a731a5f5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=85b653d0-9950-4b55-b7e1-1ba6e363ca24"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"2f2bb49a-73a8-49a3-a032-0ac512e20221","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","authorization":"Bearer **** ****REDACTED_JWT****","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"maas-api.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.43~maas-default-gateway-openshift-default-687ff6996-7nlx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-request-id":"d57d834d-27ac-4004-9e3f-0979a731a5f5"},"host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","id":"d57d834d-27ac-4004-9e3f-0979a731a5f5","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/2","scheme":"https","time":{"nanos":637654285,"seconds":1780999725},"url_path":"/maas-api/v1/api-keys","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.3:58742","port":58742}}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d57d834d-27ac-4004-9e3f-0979a731a5f5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d57d834d-27ac-4004-9e3f-0979a731a5f5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d57d834d-27ac-4004-9e3f-0979a731a5f5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d57d834d-27ac-4004-9e3f-0979a731a5f5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27d0b097-c6ef-4ce8-9384-217ac655ee47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:47284","PortSpecifier":{"PortValue":47284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27d0b097-c6ef-4ce8-9384-217ac655ee47","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27d0b097-c6ef-4ce8-9384-217ac655ee47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:47284","PortSpecifier":{"PortValue":47284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999725,"nanos":729301297},"http":{"id":"27d0b097-c6ef-4ce8-9384-217ac655ee47","method":"GET","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27d0b097-c6ef-4ce8-9384-217ac655ee47","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27d0b097-c6ef-4ce8-9384-217ac655ee47","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz\"}"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27d0b097-c6ef-4ce8-9384-217ac655ee47","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27d0b097-c6ef-4ce8-9384-217ac655ee47","input":{"auth":{"identity":"Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"maas-api.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.43~maas-default-gateway-openshift-default-687ff6996-7nlx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-request-id":"27d0b097-c6ef-4ce8-9384-217ac655ee47"},"host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","id":"27d0b097-c6ef-4ce8-9384-217ac655ee47","method":"GET","path":"/maas-api/v1/models","protocol":"HTTP/2","scheme":"https"},"time":{"nanos":729301297,"seconds":1780999725}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47284},"address":"100.64.0.4:47284"}}}}},"destination":{"address":"10.133.0.43:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27d0b097-c6ef-4ce8-9384-217ac655ee47","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27d0b097-c6ef-4ce8-9384-217ac655ee47","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27d0b097-c6ef-4ce8-9384-217ac655ee47","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27d0b097-c6ef-4ce8-9384-217ac655ee47","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27d0b097-c6ef-4ce8-9384-217ac655ee47","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aab08865-a22d-42d9-a694-6c89ac1b6a1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:49070","PortSpecifier":{"PortValue":49070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aab08865-a22d-42d9-a694-6c89ac1b6a1c","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aab08865-a22d-42d9-a694-6c89ac1b6a1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:49070","PortSpecifier":{"PortValue":49070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999725,"nanos":752959147},"http":{"id":"aab08865-a22d-42d9-a694-6c89ac1b6a1c","method":"GET","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aab08865-a22d-42d9-a694-6c89ac1b6a1c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aab08865-a22d-42d9-a694-6c89ac1b6a1c","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz\"}"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aab08865-a22d-42d9-a694-6c89ac1b6a1c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aab08865-a22d-42d9-a694-6c89ac1b6a1c","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aab08865-a22d-42d9-a694-6c89ac1b6a1c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aab08865-a22d-42d9-a694-6c89ac1b6a1c","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.50","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.43~maas-default-gateway-openshift-default-687ff6996-7nlx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.133.0.50","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"aab08865-a22d-42d9-a694-6c89ac1b6a1c"},"host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","id":"aab08865-a22d-42d9-a694-6c89ac1b6a1c","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":752959147,"seconds":1780999725},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.133.0.50:49070","port":49070}}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aab08865-a22d-42d9-a694-6c89ac1b6a1c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aab08865-a22d-42d9-a694-6c89ac1b6a1c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aab08865-a22d-42d9-a694-6c89ac1b6a1c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aab08865-a22d-42d9-a694-6c89ac1b6a1c","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aab08865-a22d-42d9-a694-6c89ac1b6a1c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aab08865-a22d-42d9-a694-6c89ac1b6a1c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"fa606f3c-1f8d-4556-b696-e73bfaa756c4","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aab08865-a22d-42d9-a694-6c89ac1b6a1c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aab08865-a22d-42d9-a694-6c89ac1b6a1c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f9a3f53-73a4-4456-addb-7e78370ce00c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49300","PortSpecifier":{"PortValue":49300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f9a3f53-73a4-4456-addb-7e78370ce00c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f9a3f53-73a4-4456-addb-7e78370ce00c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49300","PortSpecifier":{"PortValue":49300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999725,"nanos":829604909},"http":{"id":"3f9a3f53-73a4-4456-addb-7e78370ce00c","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f9a3f53-73a4-4456-addb-7e78370ce00c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f9a3f53-73a4-4456-addb-7e78370ce00c","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz\"}"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f9a3f53-73a4-4456-addb-7e78370ce00c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f9a3f53-73a4-4456-addb-7e78370ce00c","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f9a3f53-73a4-4456-addb-7e78370ce00c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f9a3f53-73a4-4456-addb-7e78370ce00c","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.43~maas-default-gateway-openshift-default-687ff6996-7nlx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"3f9a3f53-73a4-4456-addb-7e78370ce00c"},"host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","id":"3f9a3f53-73a4-4456-addb-7e78370ce00c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":829604909,"seconds":1780999725},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.4:49300","port":49300}}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f9a3f53-73a4-4456-addb-7e78370ce00c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f9a3f53-73a4-4456-addb-7e78370ce00c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f9a3f53-73a4-4456-addb-7e78370ce00c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f9a3f53-73a4-4456-addb-7e78370ce00c","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f9a3f53-73a4-4456-addb-7e78370ce00c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f9a3f53-73a4-4456-addb-7e78370ce00c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"fa606f3c-1f8d-4556-b696-e73bfaa756c4","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f9a3f53-73a4-4456-addb-7e78370ce00c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f9a3f53-73a4-4456-addb-7e78370ce00c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efc38cff-9198-4a2f-8710-5405d3024d31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:10314","PortSpecifier":{"PortValue":10314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"efc38cff-9198-4a2f-8710-5405d3024d31","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efc38cff-9198-4a2f-8710-5405d3024d31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:10314","PortSpecifier":{"PortValue":10314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999725,"nanos":886626941},"http":{"id":"efc38cff-9198-4a2f-8710-5405d3024d31","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"efc38cff-9198-4a2f-8710-5405d3024d31","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"efc38cff-9198-4a2f-8710-5405d3024d31","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz\"}"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"efc38cff-9198-4a2f-8710-5405d3024d31","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"efc38cff-9198-4a2f-8710-5405d3024d31","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"efc38cff-9198-4a2f-8710-5405d3024d31","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"efc38cff-9198-4a2f-8710-5405d3024d31","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.43~maas-default-gateway-openshift-default-687ff6996-7nlx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"efc38cff-9198-4a2f-8710-5405d3024d31"},"host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","id":"efc38cff-9198-4a2f-8710-5405d3024d31","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":886626941,"seconds":1780999725},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.2:10314","port":10314}}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efc38cff-9198-4a2f-8710-5405d3024d31","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efc38cff-9198-4a2f-8710-5405d3024d31","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efc38cff-9198-4a2f-8710-5405d3024d31","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efc38cff-9198-4a2f-8710-5405d3024d31","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efc38cff-9198-4a2f-8710-5405d3024d31","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efc38cff-9198-4a2f-8710-5405d3024d31","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"fa606f3c-1f8d-4556-b696-e73bfaa756c4","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efc38cff-9198-4a2f-8710-5405d3024d31","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efc38cff-9198-4a2f-8710-5405d3024d31","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0cdd3578-0d3b-4b9b-a6d1-cfeda49885aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:22474","PortSpecifier":{"PortValue":22474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0cdd3578-0d3b-4b9b-a6d1-cfeda49885aa","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0cdd3578-0d3b-4b9b-a6d1-cfeda49885aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:22474","PortSpecifier":{"PortValue":22474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999725,"nanos":922506265},"http":{"id":"0cdd3578-0d3b-4b9b-a6d1-cfeda49885aa","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0cdd3578-0d3b-4b9b-a6d1-cfeda49885aa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0cdd3578-0d3b-4b9b-a6d1-cfeda49885aa","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz\"}"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0cdd3578-0d3b-4b9b-a6d1-cfeda49885aa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0cdd3578-0d3b-4b9b-a6d1-cfeda49885aa","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0cdd3578-0d3b-4b9b-a6d1-cfeda49885aa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0cdd3578-0d3b-4b9b-a6d1-cfeda49885aa","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.43~maas-default-gateway-openshift-default-687ff6996-7nlx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"0cdd3578-0d3b-4b9b-a6d1-cfeda49885aa"},"host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","id":"0cdd3578-0d3b-4b9b-a6d1-cfeda49885aa","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":922506265,"seconds":1780999725},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.2:22474","port":22474}}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cdd3578-0d3b-4b9b-a6d1-cfeda49885aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cdd3578-0d3b-4b9b-a6d1-cfeda49885aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cdd3578-0d3b-4b9b-a6d1-cfeda49885aa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cdd3578-0d3b-4b9b-a6d1-cfeda49885aa","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cdd3578-0d3b-4b9b-a6d1-cfeda49885aa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cdd3578-0d3b-4b9b-a6d1-cfeda49885aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"fa606f3c-1f8d-4556-b696-e73bfaa756c4","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0cdd3578-0d3b-4b9b-a6d1-cfeda49885aa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0cdd3578-0d3b-4b9b-a6d1-cfeda49885aa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35b85454-eb70-4a79-896c-1151a8c54a81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51592","PortSpecifier":{"PortValue":51592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35b85454-eb70-4a79-896c-1151a8c54a81","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35b85454-eb70-4a79-896c-1151a8c54a81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51592","PortSpecifier":{"PortValue":51592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999725,"nanos":979758025},"http":{"id":"35b85454-eb70-4a79-896c-1151a8c54a81","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35b85454-eb70-4a79-896c-1151a8c54a81","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"35b85454-eb70-4a79-896c-1151a8c54a81","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz\"}"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"35b85454-eb70-4a79-896c-1151a8c54a81","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"35b85454-eb70-4a79-896c-1151a8c54a81","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"35b85454-eb70-4a79-896c-1151a8c54a81","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35b85454-eb70-4a79-896c-1151a8c54a81","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQAoETkFNRRI4GjZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC02ODdmZjY5OTYtN25seDcKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnQKBU9XTkVSEmsaaWt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9tYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAo5Cg1XT1JLTE9BRF9OQU1FEigaJm1hYXMtZGVmYXVsdC1nYXRld2F5LW9wZW5zaGlmdC1kZWZhdWx0","x-envoy-peer-metadata-id":"router~10.133.0.43~maas-default-gateway-openshift-default-687ff6996-7nlx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"35b85454-eb70-4a79-896c-1151a8c54a81"},"host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","id":"35b85454-eb70-4a79-896c-1151a8c54a81","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":979758025,"seconds":1780999725},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.3:51592","port":51592}}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35b85454-eb70-4a79-896c-1151a8c54a81","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35b85454-eb70-4a79-896c-1151a8c54a81","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35b85454-eb70-4a79-896c-1151a8c54a81","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35b85454-eb70-4a79-896c-1151a8c54a81","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35b85454-eb70-4a79-896c-1151a8c54a81","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35b85454-eb70-4a79-896c-1151a8c54a81","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"fa606f3c-1f8d-4556-b696-e73bfaa756c4","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35b85454-eb70-4a79-896c-1151a8c54a81","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35b85454-eb70-4a79-896c-1151a8c54a81","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c1a01c5-14f7-97e1-9248-21300baf5441","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:58756","PortSpecifier":{"PortValue":58756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c1a01c5-14f7-97e1-9248-21300baf5441","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c1a01c5-14f7-97e1-9248-21300baf5441","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:58756","PortSpecifier":{"PortValue":58756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999726,"nanos":20789483},"http":{"id":"9c1a01c5-14f7-97e1-9248-21300baf5441","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c1a01c5-14f7-97e1-9248-21300baf5441","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9c1a01c5-14f7-97e1-9248-21300baf5441","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz\"}"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9c1a01c5-14f7-97e1-9248-21300baf5441","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9c1a01c5-14f7-97e1-9248-21300baf5441","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9c1a01c5-14f7-97e1-9248-21300baf5441","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c1a01c5-14f7-97e1-9248-21300baf5441","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.43~maas-default-gateway-openshift-default-687ff6996-7nlx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"9c1a01c5-14f7-97e1-9248-21300baf5441"},"host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","id":"9c1a01c5-14f7-97e1-9248-21300baf5441","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":20789483,"seconds":1780999726},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.3:58756","port":58756}}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c1a01c5-14f7-97e1-9248-21300baf5441","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c1a01c5-14f7-97e1-9248-21300baf5441","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c1a01c5-14f7-97e1-9248-21300baf5441","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c1a01c5-14f7-97e1-9248-21300baf5441","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c1a01c5-14f7-97e1-9248-21300baf5441","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c1a01c5-14f7-97e1-9248-21300baf5441","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"fa606f3c-1f8d-4556-b696-e73bfaa756c4","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c1a01c5-14f7-97e1-9248-21300baf5441","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c1a01c5-14f7-97e1-9248-21300baf5441","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f19ecf4b-a2c9-44bf-8062-63b8640c7ff8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49308","PortSpecifier":{"PortValue":49308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f19ecf4b-a2c9-44bf-8062-63b8640c7ff8","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f19ecf4b-a2c9-44bf-8062-63b8640c7ff8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49308","PortSpecifier":{"PortValue":49308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999726,"nanos":57490319},"http":{"id":"f19ecf4b-a2c9-44bf-8062-63b8640c7ff8","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f19ecf4b-a2c9-44bf-8062-63b8640c7ff8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f19ecf4b-a2c9-44bf-8062-63b8640c7ff8","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz\"}"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f19ecf4b-a2c9-44bf-8062-63b8640c7ff8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f19ecf4b-a2c9-44bf-8062-63b8640c7ff8","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f19ecf4b-a2c9-44bf-8062-63b8640c7ff8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f19ecf4b-a2c9-44bf-8062-63b8640c7ff8","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.43~maas-default-gateway-openshift-default-687ff6996-7nlx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"f19ecf4b-a2c9-44bf-8062-63b8640c7ff8"},"host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","id":"f19ecf4b-a2c9-44bf-8062-63b8640c7ff8","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":57490319,"seconds":1780999726},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.4:49308","port":49308}}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f19ecf4b-a2c9-44bf-8062-63b8640c7ff8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f19ecf4b-a2c9-44bf-8062-63b8640c7ff8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f19ecf4b-a2c9-44bf-8062-63b8640c7ff8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f19ecf4b-a2c9-44bf-8062-63b8640c7ff8","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f19ecf4b-a2c9-44bf-8062-63b8640c7ff8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f19ecf4b-a2c9-44bf-8062-63b8640c7ff8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"fa606f3c-1f8d-4556-b696-e73bfaa756c4","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f19ecf4b-a2c9-44bf-8062-63b8640c7ff8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f19ecf4b-a2c9-44bf-8062-63b8640c7ff8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcb49868-a76e-4a35-997a-a299dec58af2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:47286","PortSpecifier":{"PortValue":47286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dcb49868-a76e-4a35-997a-a299dec58af2","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcb49868-a76e-4a35-997a-a299dec58af2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:47286","PortSpecifier":{"PortValue":47286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999726,"nanos":93184813},"http":{"id":"dcb49868-a76e-4a35-997a-a299dec58af2","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dcb49868-a76e-4a35-997a-a299dec58af2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dcb49868-a76e-4a35-997a-a299dec58af2","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz\"}"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dcb49868-a76e-4a35-997a-a299dec58af2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dcb49868-a76e-4a35-997a-a299dec58af2","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dcb49868-a76e-4a35-997a-a299dec58af2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dcb49868-a76e-4a35-997a-a299dec58af2","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.43~maas-default-gateway-openshift-default-687ff6996-7nlx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"dcb49868-a76e-4a35-997a-a299dec58af2"},"host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","id":"dcb49868-a76e-4a35-997a-a299dec58af2","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":93184813,"seconds":1780999726},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.4:47286","port":47286}}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcb49868-a76e-4a35-997a-a299dec58af2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcb49868-a76e-4a35-997a-a299dec58af2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcb49868-a76e-4a35-997a-a299dec58af2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcb49868-a76e-4a35-997a-a299dec58af2","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcb49868-a76e-4a35-997a-a299dec58af2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcb49868-a76e-4a35-997a-a299dec58af2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"fa606f3c-1f8d-4556-b696-e73bfaa756c4","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcb49868-a76e-4a35-997a-a299dec58af2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcb49868-a76e-4a35-997a-a299dec58af2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01253a4a-a017-4888-a47b-1e956b472038","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:10330","PortSpecifier":{"PortValue":10330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01253a4a-a017-4888-a47b-1e956b472038","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01253a4a-a017-4888-a47b-1e956b472038","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:10330","PortSpecifier":{"PortValue":10330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999726,"nanos":126904111},"http":{"id":"01253a4a-a017-4888-a47b-1e956b472038","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01253a4a-a017-4888-a47b-1e956b472038","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"01253a4a-a017-4888-a47b-1e956b472038","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz\"}"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"01253a4a-a017-4888-a47b-1e956b472038","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"01253a4a-a017-4888-a47b-1e956b472038","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"01253a4a-a017-4888-a47b-1e956b472038","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01253a4a-a017-4888-a47b-1e956b472038","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.43~maas-default-gateway-openshift-default-687ff6996-7nlx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"01253a4a-a017-4888-a47b-1e956b472038"},"host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","id":"01253a4a-a017-4888-a47b-1e956b472038","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":126904111,"seconds":1780999726},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.2:10330","port":10330}}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01253a4a-a017-4888-a47b-1e956b472038","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01253a4a-a017-4888-a47b-1e956b472038","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01253a4a-a017-4888-a47b-1e956b472038","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01253a4a-a017-4888-a47b-1e956b472038","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01253a4a-a017-4888-a47b-1e956b472038","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01253a4a-a017-4888-a47b-1e956b472038","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"fa606f3c-1f8d-4556-b696-e73bfaa756c4","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01253a4a-a017-4888-a47b-1e956b472038","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01253a4a-a017-4888-a47b-1e956b472038","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c593314-0ae0-4df1-9abe-1af61e2af387","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:22486","PortSpecifier":{"PortValue":22486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c593314-0ae0-4df1-9abe-1af61e2af387","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c593314-0ae0-4df1-9abe-1af61e2af387","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:22486","PortSpecifier":{"PortValue":22486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999726,"nanos":159231060},"http":{"id":"8c593314-0ae0-4df1-9abe-1af61e2af387","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c593314-0ae0-4df1-9abe-1af61e2af387","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c593314-0ae0-4df1-9abe-1af61e2af387","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz\"}"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c593314-0ae0-4df1-9abe-1af61e2af387","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c593314-0ae0-4df1-9abe-1af61e2af387","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c593314-0ae0-4df1-9abe-1af61e2af387","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c593314-0ae0-4df1-9abe-1af61e2af387","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.43~maas-default-gateway-openshift-default-687ff6996-7nlx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"8c593314-0ae0-4df1-9abe-1af61e2af387"},"host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","id":"8c593314-0ae0-4df1-9abe-1af61e2af387","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":159231060,"seconds":1780999726},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.2:22486","port":22486}}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c593314-0ae0-4df1-9abe-1af61e2af387","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c593314-0ae0-4df1-9abe-1af61e2af387","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c593314-0ae0-4df1-9abe-1af61e2af387","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c593314-0ae0-4df1-9abe-1af61e2af387","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c593314-0ae0-4df1-9abe-1af61e2af387","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c593314-0ae0-4df1-9abe-1af61e2af387","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"fa606f3c-1f8d-4556-b696-e73bfaa756c4","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c593314-0ae0-4df1-9abe-1af61e2af387","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c593314-0ae0-4df1-9abe-1af61e2af387","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e5a8e46-625d-4346-aa2c-6534b365e58d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:58758","PortSpecifier":{"PortValue":58758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e5a8e46-625d-4346-aa2c-6534b365e58d","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e5a8e46-625d-4346-aa2c-6534b365e58d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:58758","PortSpecifier":{"PortValue":58758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999726,"nanos":192989147},"http":{"id":"9e5a8e46-625d-4346-aa2c-6534b365e58d","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e5a8e46-625d-4346-aa2c-6534b365e58d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e5a8e46-625d-4346-aa2c-6534b365e58d","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz\"}"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e5a8e46-625d-4346-aa2c-6534b365e58d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e5a8e46-625d-4346-aa2c-6534b365e58d","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e5a8e46-625d-4346-aa2c-6534b365e58d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e5a8e46-625d-4346-aa2c-6534b365e58d","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQAoETkFNRRI4GjZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC02ODdmZjY5OTYtN25seDcKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnQKBU9XTkVSEmsaaWt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9tYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAo5Cg1XT1JLTE9BRF9OQU1FEigaJm1hYXMtZGVmYXVsdC1nYXRld2F5LW9wZW5zaGlmdC1kZWZhdWx0","x-envoy-peer-metadata-id":"router~10.133.0.43~maas-default-gateway-openshift-default-687ff6996-7nlx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"9e5a8e46-625d-4346-aa2c-6534b365e58d"},"host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","id":"9e5a8e46-625d-4346-aa2c-6534b365e58d","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":192989147,"seconds":1780999726},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.3:58758","port":58758}}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e5a8e46-625d-4346-aa2c-6534b365e58d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e5a8e46-625d-4346-aa2c-6534b365e58d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e5a8e46-625d-4346-aa2c-6534b365e58d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e5a8e46-625d-4346-aa2c-6534b365e58d","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e5a8e46-625d-4346-aa2c-6534b365e58d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e5a8e46-625d-4346-aa2c-6534b365e58d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"fa606f3c-1f8d-4556-b696-e73bfaa756c4","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e5a8e46-625d-4346-aa2c-6534b365e58d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e5a8e46-625d-4346-aa2c-6534b365e58d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d5fa906-54b8-4af3-8f08-ed27e76b1063","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:47296","PortSpecifier":{"PortValue":47296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d5fa906-54b8-4af3-8f08-ed27e76b1063","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d5fa906-54b8-4af3-8f08-ed27e76b1063","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:47296","PortSpecifier":{"PortValue":47296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999726,"nanos":226119526},"http":{"id":"5d5fa906-54b8-4af3-8f08-ed27e76b1063","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d5fa906-54b8-4af3-8f08-ed27e76b1063","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5d5fa906-54b8-4af3-8f08-ed27e76b1063","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz\"}"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5d5fa906-54b8-4af3-8f08-ed27e76b1063","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5d5fa906-54b8-4af3-8f08-ed27e76b1063","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5d5fa906-54b8-4af3-8f08-ed27e76b1063","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d5fa906-54b8-4af3-8f08-ed27e76b1063","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-MBljTSW4lrDYh1XI_lRjNdhhhJX8zA1eP5RBrdvk6p9tuitDlv1ABqqsZwkz","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.43~maas-default-gateway-openshift-default-687ff6996-7nlx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"5d5fa906-54b8-4af3-8f08-ed27e76b1063"},"host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","id":"5d5fa906-54b8-4af3-8f08-ed27e76b1063","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":226119526,"seconds":1780999726},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.4:47296","port":47296}}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d5fa906-54b8-4af3-8f08-ed27e76b1063","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d5fa906-54b8-4af3-8f08-ed27e76b1063","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d5fa906-54b8-4af3-8f08-ed27e76b1063","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d5fa906-54b8-4af3-8f08-ed27e76b1063","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d5fa906-54b8-4af3-8f08-ed27e76b1063","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d5fa906-54b8-4af3-8f08-ed27e76b1063","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"fa606f3c-1f8d-4556-b696-e73bfaa756c4","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d5fa906-54b8-4af3-8f08-ed27e76b1063","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d5fa906-54b8-4af3-8f08-ed27e76b1063","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de22458d-7908-4c34-a865-1ea5f273068e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:22494","PortSpecifier":{"PortValue":22494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de22458d-7908-4c34-a865-1ea5f273068e","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de22458d-7908-4c34-a865-1ea5f273068e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:22494","PortSpecifier":{"PortValue":22494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999726,"nanos":259718296},"http":{"id":"de22458d-7908-4c34-a865-1ea5f273068e","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.43~maas-default-gateway-openshift-default-687ff6996-7nlx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"de22458d-7908-4c34-a865-1ea5f273068e"},"path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/2"}},"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"metadata_context":{}}}
{"level":"info","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de22458d-7908-4c34-a865-1ea5f273068e","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de22458d-7908-4c34-a865-1ea5f273068e","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8627bc8-cecf-43ae-a264-c0212535d53d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51596","PortSpecifier":{"PortValue":51596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8627bc8-cecf-43ae-a264-c0212535d53d","method":"DELETE","path":"/maas-api/v1/api-keys/fa606f3c-1f8d-4556-b696-e73bfaa756c4","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8627bc8-cecf-43ae-a264-c0212535d53d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51596","PortSpecifier":{"PortValue":51596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999726,"nanos":287976621},"http":{"id":"a8627bc8-cecf-43ae-a264-c0212535d53d","method":"DELETE","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/fa606f3c-1f8d-4556-b696-e73bfaa756c4",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"a8627bc8-cecf-43ae-a264-c0212535d53d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a8627bc8-cecf-43ae-a264-c0212535d53d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8627bc8-cecf-43ae-a264-c0212535d53d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"2f2bb49a-73a8-49a3-a032-0ac512e20221","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=85b653d0-9950-4b55-b7e1-1ba6e363ca24"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8627bc8-cecf-43ae-a264-c0212535d53d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=85b653d0-9950-4b55-b7e1-1ba6e363ca24"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"2f2bb49a-73a8-49a3-a032-0ac512e20221","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/fa606f3c-1f8d-4556-b696-e73bfaa756c4",":scheme":"https","accept":"*/*","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"maas-api.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.43~maas-default-gateway-openshift-default-687ff6996-7nlx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-request-id":"a8627bc8-cecf-43ae-a264-c0212535d53d"},"host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","id":"a8627bc8-cecf-43ae-a264-c0212535d53d","method":"DELETE","path":"/maas-api/v1/api-keys/fa606f3c-1f8d-4556-b696-e73bfaa756c4","protocol":"HTTP/2","scheme":"https","time":{"nanos":287976621,"seconds":1780999726},"url_path":"/maas-api/v1/api-keys/fa606f3c-1f8d-4556-b696-e73bfaa756c4","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.3:51596","port":51596}}}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8627bc8-cecf-43ae-a264-c0212535d53d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8627bc8-cecf-43ae-a264-c0212535d53d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8627bc8-cecf-43ae-a264-c0212535d53d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8627bc8-cecf-43ae-a264-c0212535d53d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dcb0532-027e-4fab-bd58-7edd6e28e1f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3122","PortSpecifier":{"PortValue":3122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2dcb0532-027e-4fab-bd58-7edd6e28e1f2","method":"GET","path":"/maas-api/v1/subscriptions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dcb0532-027e-4fab-bd58-7edd6e28e1f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3122","PortSpecifier":{"PortValue":3122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999733,"nanos":131866422},"http":{"id":"2dcb0532-027e-4fab-bd58-7edd6e28e1f2","method":"GET","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"2dcb0532-027e-4fab-bd58-7edd6e28e1f2","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2dcb0532-027e-4fab-bd58-7edd6e28e1f2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2dcb0532-027e-4fab-bd58-7edd6e28e1f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2dcb0532-027e-4fab-bd58-7edd6e28e1f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"maas-api.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.43~maas-default-gateway-openshift-default-687ff6996-7nlx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-request-id":"2dcb0532-027e-4fab-bd58-7edd6e28e1f2"},"host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","id":"2dcb0532-027e-4fab-bd58-7edd6e28e1f2","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/2","scheme":"https","time":{"nanos":131866422,"seconds":1780999733},"url_path":"/maas-api/v1/subscriptions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.4:3122","port":3122}}}
{"level":"debug","ts":"2026-06-09T10:08:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dcb0532-027e-4fab-bd58-7edd6e28e1f2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dcb0532-027e-4fab-bd58-7edd6e28e1f2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dcb0532-027e-4fab-bd58-7edd6e28e1f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dcb0532-027e-4fab-bd58-7edd6e28e1f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04ec4bcc-5aa2-4ad3-b916-36290def687c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20478","PortSpecifier":{"PortValue":20478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04ec4bcc-5aa2-4ad3-b916-36290def687c","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04ec4bcc-5aa2-4ad3-b916-36290def687c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20478","PortSpecifier":{"PortValue":20478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999733,"nanos":608018166},"http":{"id":"04ec4bcc-5aa2-4ad3-b916-36290def687c","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04ec4bcc-5aa2-4ad3-b916-36290def687c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781000033,"groups":["Engineering","Project-Alpha"],"iat":1780999733,"iss":"https://keycloak.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8b213097-0497-ece6-a6e2-724549f06b48","preferred_username":"alice_lead","scope":"openid email profile","sid":"dxXPHpW6Iv8tLGBch-Pyg2XM","sub":"f7722c81-a5c8-4dbe-b684-8b224e71d26e","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T10:08:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04ec4bcc-5aa2-4ad3-b916-36290def687c","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781000033,"groups":["Engineering","Project-Alpha"],"iat":1780999733,"iss":"https://keycloak.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8b213097-0497-ece6-a6e2-724549f06b48","preferred_username":"alice_lead","scope":"openid email profile","sid":"dxXPHpW6Iv8tLGBch-Pyg2XM","sub":"f7722c81-a5c8-4dbe-b684-8b224e71d26e","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","authorization":"Bearer **** ****REDACTED_JWT****","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"maas-api.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.43~maas-default-gateway-openshift-default-687ff6996-7nlx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-request-id":"04ec4bcc-5aa2-4ad3-b916-36290def687c"},"host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","id":"04ec4bcc-5aa2-4ad3-b916-36290def687c","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/2","scheme":"https","time":{"nanos":608018166,"seconds":1780999733},"url_path":"/maas-api/v1/api-keys","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.4:20478","port":20478}}}
{"level":"debug","ts":"2026-06-09T10:08:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04ec4bcc-5aa2-4ad3-b916-36290def687c","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T10:08:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04ec4bcc-5aa2-4ad3-b916-36290def687c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T10:08:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04ec4bcc-5aa2-4ad3-b916-36290def687c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T10:08:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04ec4bcc-5aa2-4ad3-b916-36290def687c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04ec4bcc-5aa2-4ad3-b916-36290def687c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da01d4b3-ebae-40b4-855c-70466bb70797","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8770","PortSpecifier":{"PortValue":8770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da01d4b3-ebae-40b4-855c-70466bb70797","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da01d4b3-ebae-40b4-855c-70466bb70797","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8770","PortSpecifier":{"PortValue":8770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":258841860},"http":{"id":"da01d4b3-ebae-40b4-855c-70466bb70797","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"da01d4b3-ebae-40b4-855c-70466bb70797","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"da01d4b3-ebae-40b4-855c-70466bb70797","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da01d4b3-ebae-40b4-855c-70466bb70797","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da01d4b3-ebae-40b4-855c-70466bb70797","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da01d4b3-ebae-40b4-855c-70466bb70797","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da01d4b3-ebae-40b4-855c-70466bb70797","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da01d4b3-ebae-40b4-855c-70466bb70797","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da01d4b3-ebae-40b4-855c-70466bb70797","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7c4d3ac-bad2-4799-87c8-6f969a72dbd6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54290","PortSpecifier":{"PortValue":54290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7c4d3ac-bad2-4799-87c8-6f969a72dbd6","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7c4d3ac-bad2-4799-87c8-6f969a72dbd6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54290","PortSpecifier":{"PortValue":54290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":303036398},"http":{"id":"b7c4d3ac-bad2-4799-87c8-6f969a72dbd6","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"b7c4d3ac-bad2-4799-87c8-6f969a72dbd6","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b7c4d3ac-bad2-4799-87c8-6f969a72dbd6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7c4d3ac-bad2-4799-87c8-6f969a72dbd6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7c4d3ac-bad2-4799-87c8-6f969a72dbd6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7c4d3ac-bad2-4799-87c8-6f969a72dbd6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7c4d3ac-bad2-4799-87c8-6f969a72dbd6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7c4d3ac-bad2-4799-87c8-6f969a72dbd6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7c4d3ac-bad2-4799-87c8-6f969a72dbd6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"900493f8-92df-4369-8538-b368ca3083e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3134","PortSpecifier":{"PortValue":3134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"900493f8-92df-4369-8538-b368ca3083e2","method":"GET","path":"/maas-api/v1/api-keys/0889f36d-c734-4bad-8120-0b28a0b0aee2","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"900493f8-92df-4369-8538-b368ca3083e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3134","PortSpecifier":{"PortValue":3134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":336855081},"http":{"id":"900493f8-92df-4369-8538-b368ca3083e2","method":"GET","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0889f36d-c734-4bad-8120-0b28a0b0aee2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"900493f8-92df-4369-8538-b368ca3083e2","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"900493f8-92df-4369-8538-b368ca3083e2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"900493f8-92df-4369-8538-b368ca3083e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"900493f8-92df-4369-8538-b368ca3083e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0889f36d-c734-4bad-8120-0b28a0b0aee2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"900493f8-92df-4369-8538-b368ca3083e2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"900493f8-92df-4369-8538-b368ca3083e2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"900493f8-92df-4369-8538-b368ca3083e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"900493f8-92df-4369-8538-b368ca3083e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca69b144-0714-4d6a-9e18-7eabb9a39bd9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8786","PortSpecifier":{"PortValue":8786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca69b144-0714-4d6a-9e18-7eabb9a39bd9","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca69b144-0714-4d6a-9e18-7eabb9a39bd9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8786","PortSpecifier":{"PortValue":8786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":376090048},"http":{"id":"ca69b144-0714-4d6a-9e18-7eabb9a39bd9","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"ca69b144-0714-4d6a-9e18-7eabb9a39bd9","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ca69b144-0714-4d6a-9e18-7eabb9a39bd9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca69b144-0714-4d6a-9e18-7eabb9a39bd9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca69b144-0714-4d6a-9e18-7eabb9a39bd9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca69b144-0714-4d6a-9e18-7eabb9a39bd9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca69b144-0714-4d6a-9e18-7eabb9a39bd9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca69b144-0714-4d6a-9e18-7eabb9a39bd9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca69b144-0714-4d6a-9e18-7eabb9a39bd9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28f95d30-99ae-4549-92bc-9bd72741410f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54296","PortSpecifier":{"PortValue":54296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28f95d30-99ae-4549-92bc-9bd72741410f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28f95d30-99ae-4549-92bc-9bd72741410f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54296","PortSpecifier":{"PortValue":54296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":411833359},"http":{"id":"28f95d30-99ae-4549-92bc-9bd72741410f","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"28f95d30-99ae-4549-92bc-9bd72741410f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"28f95d30-99ae-4549-92bc-9bd72741410f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28f95d30-99ae-4549-92bc-9bd72741410f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28f95d30-99ae-4549-92bc-9bd72741410f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28f95d30-99ae-4549-92bc-9bd72741410f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28f95d30-99ae-4549-92bc-9bd72741410f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28f95d30-99ae-4549-92bc-9bd72741410f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28f95d30-99ae-4549-92bc-9bd72741410f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7101c976-58e5-43e4-8c0f-79abc80d4aaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:7588","PortSpecifier":{"PortValue":7588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7101c976-58e5-43e4-8c0f-79abc80d4aaa","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7101c976-58e5-43e4-8c0f-79abc80d4aaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:7588","PortSpecifier":{"PortValue":7588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":444188272},"http":{"id":"7101c976-58e5-43e4-8c0f-79abc80d4aaa","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"7101c976-58e5-43e4-8c0f-79abc80d4aaa","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7101c976-58e5-43e4-8c0f-79abc80d4aaa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7101c976-58e5-43e4-8c0f-79abc80d4aaa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7101c976-58e5-43e4-8c0f-79abc80d4aaa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7101c976-58e5-43e4-8c0f-79abc80d4aaa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7101c976-58e5-43e4-8c0f-79abc80d4aaa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7101c976-58e5-43e4-8c0f-79abc80d4aaa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7101c976-58e5-43e4-8c0f-79abc80d4aaa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10190fd0-4666-4e9f-a21d-e8a8cfbfb7d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23536","PortSpecifier":{"PortValue":23536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"10190fd0-4666-4e9f-a21d-e8a8cfbfb7d3","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10190fd0-4666-4e9f-a21d-e8a8cfbfb7d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23536","PortSpecifier":{"PortValue":23536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":480257155},"http":{"id":"10190fd0-4666-4e9f-a21d-e8a8cfbfb7d3","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"10190fd0-4666-4e9f-a21d-e8a8cfbfb7d3","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"10190fd0-4666-4e9f-a21d-e8a8cfbfb7d3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"10190fd0-4666-4e9f-a21d-e8a8cfbfb7d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"10190fd0-4666-4e9f-a21d-e8a8cfbfb7d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10190fd0-4666-4e9f-a21d-e8a8cfbfb7d3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10190fd0-4666-4e9f-a21d-e8a8cfbfb7d3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10190fd0-4666-4e9f-a21d-e8a8cfbfb7d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10190fd0-4666-4e9f-a21d-e8a8cfbfb7d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee29ad74-9a12-41e0-881f-dad013964f74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3148","PortSpecifier":{"PortValue":3148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee29ad74-9a12-41e0-881f-dad013964f74","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee29ad74-9a12-41e0-881f-dad013964f74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3148","PortSpecifier":{"PortValue":3148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":518227112},"http":{"id":"ee29ad74-9a12-41e0-881f-dad013964f74","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"ee29ad74-9a12-41e0-881f-dad013964f74","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ee29ad74-9a12-41e0-881f-dad013964f74","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee29ad74-9a12-41e0-881f-dad013964f74","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee29ad74-9a12-41e0-881f-dad013964f74","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee29ad74-9a12-41e0-881f-dad013964f74","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee29ad74-9a12-41e0-881f-dad013964f74","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee29ad74-9a12-41e0-881f-dad013964f74","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee29ad74-9a12-41e0-881f-dad013964f74","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42e2805d-1f5e-4daa-b464-55964ee79a00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20482","PortSpecifier":{"PortValue":20482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42e2805d-1f5e-4daa-b464-55964ee79a00","method":"DELETE","path":"/maas-api/v1/api-keys/2e41f32c-0857-41a0-8411-33eaf596288c","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42e2805d-1f5e-4daa-b464-55964ee79a00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20482","PortSpecifier":{"PortValue":20482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":551926731},"http":{"id":"42e2805d-1f5e-4daa-b464-55964ee79a00","method":"DELETE","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/2e41f32c-0857-41a0-8411-33eaf596288c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"42e2805d-1f5e-4daa-b464-55964ee79a00","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42e2805d-1f5e-4daa-b464-55964ee79a00","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42e2805d-1f5e-4daa-b464-55964ee79a00","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42e2805d-1f5e-4daa-b464-55964ee79a00","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/2e41f32c-0857-41a0-8411-33eaf596288c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42e2805d-1f5e-4daa-b464-55964ee79a00","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42e2805d-1f5e-4daa-b464-55964ee79a00","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42e2805d-1f5e-4daa-b464-55964ee79a00","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42e2805d-1f5e-4daa-b464-55964ee79a00","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6adc18b6-abbd-497c-9fd6-843b7cd1b6e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8798","PortSpecifier":{"PortValue":8798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6adc18b6-abbd-497c-9fd6-843b7cd1b6e0","method":"GET","path":"/maas-api/v1/api-keys/2e41f32c-0857-41a0-8411-33eaf596288c","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6adc18b6-abbd-497c-9fd6-843b7cd1b6e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8798","PortSpecifier":{"PortValue":8798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":583293934},"http":{"id":"6adc18b6-abbd-497c-9fd6-843b7cd1b6e0","method":"GET","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2e41f32c-0857-41a0-8411-33eaf596288c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"6adc18b6-abbd-497c-9fd6-843b7cd1b6e0","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6adc18b6-abbd-497c-9fd6-843b7cd1b6e0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6adc18b6-abbd-497c-9fd6-843b7cd1b6e0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6adc18b6-abbd-497c-9fd6-843b7cd1b6e0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2e41f32c-0857-41a0-8411-33eaf596288c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6adc18b6-abbd-497c-9fd6-843b7cd1b6e0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6adc18b6-abbd-497c-9fd6-843b7cd1b6e0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6adc18b6-abbd-497c-9fd6-843b7cd1b6e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6adc18b6-abbd-497c-9fd6-843b7cd1b6e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6b39b2b-d76b-46a2-8144-c8d1c24f4b22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54310","PortSpecifier":{"PortValue":54310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6b39b2b-d76b-46a2-8144-c8d1c24f4b22","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6b39b2b-d76b-46a2-8144-c8d1c24f4b22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54310","PortSpecifier":{"PortValue":54310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":618089889},"http":{"id":"c6b39b2b-d76b-46a2-8144-c8d1c24f4b22","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c6b39b2b-d76b-46a2-8144-c8d1c24f4b22","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c6b39b2b-d76b-46a2-8144-c8d1c24f4b22","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6b39b2b-d76b-46a2-8144-c8d1c24f4b22","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6b39b2b-d76b-46a2-8144-c8d1c24f4b22","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6b39b2b-d76b-46a2-8144-c8d1c24f4b22","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6b39b2b-d76b-46a2-8144-c8d1c24f4b22","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6b39b2b-d76b-46a2-8144-c8d1c24f4b22","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6b39b2b-d76b-46a2-8144-c8d1c24f4b22","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81ce5cbd-19e2-4302-9088-5854fc092fae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3152","PortSpecifier":{"PortValue":3152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81ce5cbd-19e2-4302-9088-5854fc092fae","method":"GET","path":"/maas-api/v1/api-keys/16b54eae-713a-422e-9c9f-56f5c7d5f153","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81ce5cbd-19e2-4302-9088-5854fc092fae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3152","PortSpecifier":{"PortValue":3152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":649761373},"http":{"id":"81ce5cbd-19e2-4302-9088-5854fc092fae","method":"GET","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/16b54eae-713a-422e-9c9f-56f5c7d5f153",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"81ce5cbd-19e2-4302-9088-5854fc092fae","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"81ce5cbd-19e2-4302-9088-5854fc092fae","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81ce5cbd-19e2-4302-9088-5854fc092fae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81ce5cbd-19e2-4302-9088-5854fc092fae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/16b54eae-713a-422e-9c9f-56f5c7d5f153",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81ce5cbd-19e2-4302-9088-5854fc092fae","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81ce5cbd-19e2-4302-9088-5854fc092fae","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81ce5cbd-19e2-4302-9088-5854fc092fae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81ce5cbd-19e2-4302-9088-5854fc092fae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30fe91c4-fd37-45b3-8fc4-9a2bde4d28f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:7598","PortSpecifier":{"PortValue":7598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30fe91c4-fd37-45b3-8fc4-9a2bde4d28f1","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30fe91c4-fd37-45b3-8fc4-9a2bde4d28f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:7598","PortSpecifier":{"PortValue":7598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":679723285},"http":{"id":"30fe91c4-fd37-45b3-8fc4-9a2bde4d28f1","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"30fe91c4-fd37-45b3-8fc4-9a2bde4d28f1","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"30fe91c4-fd37-45b3-8fc4-9a2bde4d28f1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30fe91c4-fd37-45b3-8fc4-9a2bde4d28f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"2f2bb49a-73a8-49a3-a032-0ac512e20221","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=85b653d0-9950-4b55-b7e1-1ba6e363ca24"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30fe91c4-fd37-45b3-8fc4-9a2bde4d28f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=85b653d0-9950-4b55-b7e1-1ba6e363ca24"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"2f2bb49a-73a8-49a3-a032-0ac512e20221","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30fe91c4-fd37-45b3-8fc4-9a2bde4d28f1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30fe91c4-fd37-45b3-8fc4-9a2bde4d28f1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30fe91c4-fd37-45b3-8fc4-9a2bde4d28f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30fe91c4-fd37-45b3-8fc4-9a2bde4d28f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a26e1bae-7710-4e31-a067-af2ada64d290","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8810","PortSpecifier":{"PortValue":8810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a26e1bae-7710-4e31-a067-af2ada64d290","method":"DELETE","path":"/maas-api/v1/api-keys/16b54eae-713a-422e-9c9f-56f5c7d5f153","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a26e1bae-7710-4e31-a067-af2ada64d290","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8810","PortSpecifier":{"PortValue":8810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":719453259},"http":{"id":"a26e1bae-7710-4e31-a067-af2ada64d290","method":"DELETE","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/16b54eae-713a-422e-9c9f-56f5c7d5f153",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"a26e1bae-7710-4e31-a067-af2ada64d290","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a26e1bae-7710-4e31-a067-af2ada64d290","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a26e1bae-7710-4e31-a067-af2ada64d290","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"2f2bb49a-73a8-49a3-a032-0ac512e20221","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=85b653d0-9950-4b55-b7e1-1ba6e363ca24"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a26e1bae-7710-4e31-a067-af2ada64d290","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=85b653d0-9950-4b55-b7e1-1ba6e363ca24"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"2f2bb49a-73a8-49a3-a032-0ac512e20221","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/16b54eae-713a-422e-9c9f-56f5c7d5f153",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a26e1bae-7710-4e31-a067-af2ada64d290","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a26e1bae-7710-4e31-a067-af2ada64d290","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a26e1bae-7710-4e31-a067-af2ada64d290","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a26e1bae-7710-4e31-a067-af2ada64d290","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bbe08f1-766a-43a2-b2dc-93c9befc56fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23542","PortSpecifier":{"PortValue":23542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6bbe08f1-766a-43a2-b2dc-93c9befc56fc","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bbe08f1-766a-43a2-b2dc-93c9befc56fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23542","PortSpecifier":{"PortValue":23542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":755809158},"http":{"id":"6bbe08f1-766a-43a2-b2dc-93c9befc56fc","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"6bbe08f1-766a-43a2-b2dc-93c9befc56fc","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6bbe08f1-766a-43a2-b2dc-93c9befc56fc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6bbe08f1-766a-43a2-b2dc-93c9befc56fc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"2f2bb49a-73a8-49a3-a032-0ac512e20221","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=85b653d0-9950-4b55-b7e1-1ba6e363ca24"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6bbe08f1-766a-43a2-b2dc-93c9befc56fc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=85b653d0-9950-4b55-b7e1-1ba6e363ca24"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"2f2bb49a-73a8-49a3-a032-0ac512e20221","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bbe08f1-766a-43a2-b2dc-93c9befc56fc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bbe08f1-766a-43a2-b2dc-93c9befc56fc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bbe08f1-766a-43a2-b2dc-93c9befc56fc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bbe08f1-766a-43a2-b2dc-93c9befc56fc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25cd441d-b035-47f7-8253-9a3f2e72cab7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20486","PortSpecifier":{"PortValue":20486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25cd441d-b035-47f7-8253-9a3f2e72cab7","method":"GET","path":"/maas-api/v1/api-keys/3c107182-fabc-4b26-a2a2-7d500666406c","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25cd441d-b035-47f7-8253-9a3f2e72cab7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20486","PortSpecifier":{"PortValue":20486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":789246777},"http":{"id":"25cd441d-b035-47f7-8253-9a3f2e72cab7","method":"GET","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3c107182-fabc-4b26-a2a2-7d500666406c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"25cd441d-b035-47f7-8253-9a3f2e72cab7","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"25cd441d-b035-47f7-8253-9a3f2e72cab7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25cd441d-b035-47f7-8253-9a3f2e72cab7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25cd441d-b035-47f7-8253-9a3f2e72cab7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3c107182-fabc-4b26-a2a2-7d500666406c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25cd441d-b035-47f7-8253-9a3f2e72cab7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25cd441d-b035-47f7-8253-9a3f2e72cab7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25cd441d-b035-47f7-8253-9a3f2e72cab7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25cd441d-b035-47f7-8253-9a3f2e72cab7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e529ed97-5e79-4dc7-a5ff-405846dd1b59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54326","PortSpecifier":{"PortValue":54326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e529ed97-5e79-4dc7-a5ff-405846dd1b59","method":"DELETE","path":"/maas-api/v1/api-keys/3c107182-fabc-4b26-a2a2-7d500666406c","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e529ed97-5e79-4dc7-a5ff-405846dd1b59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54326","PortSpecifier":{"PortValue":54326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":823391532},"http":{"id":"e529ed97-5e79-4dc7-a5ff-405846dd1b59","method":"DELETE","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/3c107182-fabc-4b26-a2a2-7d500666406c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"e529ed97-5e79-4dc7-a5ff-405846dd1b59","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e529ed97-5e79-4dc7-a5ff-405846dd1b59","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e529ed97-5e79-4dc7-a5ff-405846dd1b59","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e529ed97-5e79-4dc7-a5ff-405846dd1b59","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/3c107182-fabc-4b26-a2a2-7d500666406c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e529ed97-5e79-4dc7-a5ff-405846dd1b59","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e529ed97-5e79-4dc7-a5ff-405846dd1b59","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e529ed97-5e79-4dc7-a5ff-405846dd1b59","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e529ed97-5e79-4dc7-a5ff-405846dd1b59","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"224a7e0f-9e88-4df4-8b0e-eb912bae457d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3160","PortSpecifier":{"PortValue":3160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"224a7e0f-9e88-4df4-8b0e-eb912bae457d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"224a7e0f-9e88-4df4-8b0e-eb912bae457d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3160","PortSpecifier":{"PortValue":3160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":858319750},"http":{"id":"224a7e0f-9e88-4df4-8b0e-eb912bae457d","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"224a7e0f-9e88-4df4-8b0e-eb912bae457d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"224a7e0f-9e88-4df4-8b0e-eb912bae457d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"224a7e0f-9e88-4df4-8b0e-eb912bae457d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"224a7e0f-9e88-4df4-8b0e-eb912bae457d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"224a7e0f-9e88-4df4-8b0e-eb912bae457d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"224a7e0f-9e88-4df4-8b0e-eb912bae457d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"224a7e0f-9e88-4df4-8b0e-eb912bae457d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"224a7e0f-9e88-4df4-8b0e-eb912bae457d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6acd1f0a-43fc-438d-b2e5-a2fb245a4412","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:7606","PortSpecifier":{"PortValue":7606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6acd1f0a-43fc-438d-b2e5-a2fb245a4412","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6acd1f0a-43fc-438d-b2e5-a2fb245a4412","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:7606","PortSpecifier":{"PortValue":7606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":891171445},"http":{"id":"6acd1f0a-43fc-438d-b2e5-a2fb245a4412","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"6acd1f0a-43fc-438d-b2e5-a2fb245a4412","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6acd1f0a-43fc-438d-b2e5-a2fb245a4412","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6acd1f0a-43fc-438d-b2e5-a2fb245a4412","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6acd1f0a-43fc-438d-b2e5-a2fb245a4412","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6acd1f0a-43fc-438d-b2e5-a2fb245a4412","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6acd1f0a-43fc-438d-b2e5-a2fb245a4412","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6acd1f0a-43fc-438d-b2e5-a2fb245a4412","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6acd1f0a-43fc-438d-b2e5-a2fb245a4412","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1522d0ba-d740-49c6-be62-38470bb86224","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8812","PortSpecifier":{"PortValue":8812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1522d0ba-d740-49c6-be62-38470bb86224","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1522d0ba-d740-49c6-be62-38470bb86224","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8812","PortSpecifier":{"PortValue":8812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":924391193},"http":{"id":"1522d0ba-d740-49c6-be62-38470bb86224","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"1522d0ba-d740-49c6-be62-38470bb86224","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1522d0ba-d740-49c6-be62-38470bb86224","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1522d0ba-d740-49c6-be62-38470bb86224","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1522d0ba-d740-49c6-be62-38470bb86224","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1522d0ba-d740-49c6-be62-38470bb86224","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1522d0ba-d740-49c6-be62-38470bb86224","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1522d0ba-d740-49c6-be62-38470bb86224","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1522d0ba-d740-49c6-be62-38470bb86224","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46c308b7-e0eb-4ea0-8ea2-a1ff86fd7b13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54332","PortSpecifier":{"PortValue":54332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46c308b7-e0eb-4ea0-8ea2-a1ff86fd7b13","method":"GET","path":"/maas-api/v1/api-keys/15c2978f-1e63-4eb0-80ae-19e0bcda79a6","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46c308b7-e0eb-4ea0-8ea2-a1ff86fd7b13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54332","PortSpecifier":{"PortValue":54332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":955833328},"http":{"id":"46c308b7-e0eb-4ea0-8ea2-a1ff86fd7b13","method":"GET","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/15c2978f-1e63-4eb0-80ae-19e0bcda79a6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"46c308b7-e0eb-4ea0-8ea2-a1ff86fd7b13","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"46c308b7-e0eb-4ea0-8ea2-a1ff86fd7b13","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46c308b7-e0eb-4ea0-8ea2-a1ff86fd7b13","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46c308b7-e0eb-4ea0-8ea2-a1ff86fd7b13","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/15c2978f-1e63-4eb0-80ae-19e0bcda79a6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46c308b7-e0eb-4ea0-8ea2-a1ff86fd7b13","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46c308b7-e0eb-4ea0-8ea2-a1ff86fd7b13","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46c308b7-e0eb-4ea0-8ea2-a1ff86fd7b13","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46c308b7-e0eb-4ea0-8ea2-a1ff86fd7b13","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c6c2b9d-70c0-4065-8215-dc416a1670e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3172","PortSpecifier":{"PortValue":3172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c6c2b9d-70c0-4065-8215-dc416a1670e9","method":"POST","path":"/maas-api/v1/api-keys/bulk-revoke","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c6c2b9d-70c0-4065-8215-dc416a1670e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3172","PortSpecifier":{"PortValue":3172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999736,"nanos":987771635},"http":{"id":"7c6c2b9d-70c0-4065-8215-dc416a1670e9","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"7c6c2b9d-70c0-4065-8215-dc416a1670e9","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c6c2b9d-70c0-4065-8215-dc416a1670e9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c6c2b9d-70c0-4065-8215-dc416a1670e9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c6c2b9d-70c0-4065-8215-dc416a1670e9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c6c2b9d-70c0-4065-8215-dc416a1670e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c6c2b9d-70c0-4065-8215-dc416a1670e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c6c2b9d-70c0-4065-8215-dc416a1670e9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c6c2b9d-70c0-4065-8215-dc416a1670e9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e8eaf0d-a7b6-4f3b-a13f-018babb10a3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8816","PortSpecifier":{"PortValue":8816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e8eaf0d-a7b6-4f3b-a13f-018babb10a3d","method":"GET","path":"/maas-api/v1/api-keys/15c2978f-1e63-4eb0-80ae-19e0bcda79a6","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e8eaf0d-a7b6-4f3b-a13f-018babb10a3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8816","PortSpecifier":{"PortValue":8816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999737,"nanos":21451104},"http":{"id":"6e8eaf0d-a7b6-4f3b-a13f-018babb10a3d","method":"GET","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/15c2978f-1e63-4eb0-80ae-19e0bcda79a6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"6e8eaf0d-a7b6-4f3b-a13f-018babb10a3d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6e8eaf0d-a7b6-4f3b-a13f-018babb10a3d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e8eaf0d-a7b6-4f3b-a13f-018babb10a3d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e8eaf0d-a7b6-4f3b-a13f-018babb10a3d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/15c2978f-1e63-4eb0-80ae-19e0bcda79a6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e8eaf0d-a7b6-4f3b-a13f-018babb10a3d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e8eaf0d-a7b6-4f3b-a13f-018babb10a3d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e8eaf0d-a7b6-4f3b-a13f-018babb10a3d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e8eaf0d-a7b6-4f3b-a13f-018babb10a3d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ee71742-e696-4e7a-87bd-2496ca406c10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54346","PortSpecifier":{"PortValue":54346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ee71742-e696-4e7a-87bd-2496ca406c10","method":"GET","path":"/maas-api/v1/api-keys/1ffd4322-01f7-40fc-ac49-10cc8bf32e06","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ee71742-e696-4e7a-87bd-2496ca406c10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54346","PortSpecifier":{"PortValue":54346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999737,"nanos":53069671},"http":{"id":"1ee71742-e696-4e7a-87bd-2496ca406c10","method":"GET","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1ffd4322-01f7-40fc-ac49-10cc8bf32e06",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"1ee71742-e696-4e7a-87bd-2496ca406c10","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1ee71742-e696-4e7a-87bd-2496ca406c10","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ee71742-e696-4e7a-87bd-2496ca406c10","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ee71742-e696-4e7a-87bd-2496ca406c10","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1ffd4322-01f7-40fc-ac49-10cc8bf32e06",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ee71742-e696-4e7a-87bd-2496ca406c10","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ee71742-e696-4e7a-87bd-2496ca406c10","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ee71742-e696-4e7a-87bd-2496ca406c10","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ee71742-e696-4e7a-87bd-2496ca406c10","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"928acfb7-8f7b-4c51-9b0b-5472719de53a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3174","PortSpecifier":{"PortValue":3174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"928acfb7-8f7b-4c51-9b0b-5472719de53a","method":"GET","path":"/maas-api/v1/api-keys/5619c27a-2959-4d87-8a68-04f27eb54dfd","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"928acfb7-8f7b-4c51-9b0b-5472719de53a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3174","PortSpecifier":{"PortValue":3174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999737,"nanos":84043474},"http":{"id":"928acfb7-8f7b-4c51-9b0b-5472719de53a","method":"GET","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5619c27a-2959-4d87-8a68-04f27eb54dfd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"928acfb7-8f7b-4c51-9b0b-5472719de53a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"928acfb7-8f7b-4c51-9b0b-5472719de53a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"928acfb7-8f7b-4c51-9b0b-5472719de53a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"928acfb7-8f7b-4c51-9b0b-5472719de53a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5619c27a-2959-4d87-8a68-04f27eb54dfd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"928acfb7-8f7b-4c51-9b0b-5472719de53a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"928acfb7-8f7b-4c51-9b0b-5472719de53a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"928acfb7-8f7b-4c51-9b0b-5472719de53a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"928acfb7-8f7b-4c51-9b0b-5472719de53a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d5f3993-8fc5-485f-bc37-2f942a54411c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23552","PortSpecifier":{"PortValue":23552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d5f3993-8fc5-485f-bc37-2f942a54411c","method":"POST","path":"/maas-api/v1/api-keys/bulk-revoke","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d5f3993-8fc5-485f-bc37-2f942a54411c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23552","PortSpecifier":{"PortValue":23552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999737,"nanos":120773083},"http":{"id":"2d5f3993-8fc5-485f-bc37-2f942a54411c","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"2d5f3993-8fc5-485f-bc37-2f942a54411c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d5f3993-8fc5-485f-bc37-2f942a54411c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d5f3993-8fc5-485f-bc37-2f942a54411c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d5f3993-8fc5-485f-bc37-2f942a54411c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d5f3993-8fc5-485f-bc37-2f942a54411c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d5f3993-8fc5-485f-bc37-2f942a54411c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d5f3993-8fc5-485f-bc37-2f942a54411c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d5f3993-8fc5-485f-bc37-2f942a54411c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99fd6205-85d3-44e0-997c-cd902c906ce5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20496","PortSpecifier":{"PortValue":20496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99fd6205-85d3-44e0-997c-cd902c906ce5","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99fd6205-85d3-44e0-997c-cd902c906ce5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20496","PortSpecifier":{"PortValue":20496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999737,"nanos":154012985},"http":{"id":"99fd6205-85d3-44e0-997c-cd902c906ce5","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"99fd6205-85d3-44e0-997c-cd902c906ce5","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"99fd6205-85d3-44e0-997c-cd902c906ce5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99fd6205-85d3-44e0-997c-cd902c906ce5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99fd6205-85d3-44e0-997c-cd902c906ce5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99fd6205-85d3-44e0-997c-cd902c906ce5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99fd6205-85d3-44e0-997c-cd902c906ce5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99fd6205-85d3-44e0-997c-cd902c906ce5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99fd6205-85d3-44e0-997c-cd902c906ce5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c708674-1727-4094-a615-1ef895d4b236","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:7622","PortSpecifier":{"PortValue":7622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c708674-1727-4094-a615-1ef895d4b236","method":"GET","path":"/maas-api/v1/api-keys/3c3a778f-78c8-4a5c-9ca2-b9c098bb27f3","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c708674-1727-4094-a615-1ef895d4b236","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:7622","PortSpecifier":{"PortValue":7622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999737,"nanos":184934130},"http":{"id":"2c708674-1727-4094-a615-1ef895d4b236","method":"GET","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3c3a778f-78c8-4a5c-9ca2-b9c098bb27f3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"2c708674-1727-4094-a615-1ef895d4b236","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c708674-1727-4094-a615-1ef895d4b236","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c708674-1727-4094-a615-1ef895d4b236","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c708674-1727-4094-a615-1ef895d4b236","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3c3a778f-78c8-4a5c-9ca2-b9c098bb27f3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c708674-1727-4094-a615-1ef895d4b236","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c708674-1727-4094-a615-1ef895d4b236","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c708674-1727-4094-a615-1ef895d4b236","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c708674-1727-4094-a615-1ef895d4b236","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8acd4d9-cefb-4ace-9c00-bd86485894c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23568","PortSpecifier":{"PortValue":23568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8acd4d9-cefb-4ace-9c00-bd86485894c1","method":"POST","path":"/maas-api/v1/api-keys/bulk-revoke","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8acd4d9-cefb-4ace-9c00-bd86485894c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23568","PortSpecifier":{"PortValue":23568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999737,"nanos":220054851},"http":{"id":"f8acd4d9-cefb-4ace-9c00-bd86485894c1","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"f8acd4d9-cefb-4ace-9c00-bd86485894c1","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f8acd4d9-cefb-4ace-9c00-bd86485894c1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8acd4d9-cefb-4ace-9c00-bd86485894c1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"2f2bb49a-73a8-49a3-a032-0ac512e20221","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=85b653d0-9950-4b55-b7e1-1ba6e363ca24"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8acd4d9-cefb-4ace-9c00-bd86485894c1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=85b653d0-9950-4b55-b7e1-1ba6e363ca24"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"2f2bb49a-73a8-49a3-a032-0ac512e20221","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8acd4d9-cefb-4ace-9c00-bd86485894c1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8acd4d9-cefb-4ace-9c00-bd86485894c1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8acd4d9-cefb-4ace-9c00-bd86485894c1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8acd4d9-cefb-4ace-9c00-bd86485894c1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c41ec98d-11ea-4b64-99d7-064e18d9aef8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8818","PortSpecifier":{"PortValue":8818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c41ec98d-11ea-4b64-99d7-064e18d9aef8","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c41ec98d-11ea-4b64-99d7-064e18d9aef8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8818","PortSpecifier":{"PortValue":8818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999737,"nanos":256896898},"http":{"id":"c41ec98d-11ea-4b64-99d7-064e18d9aef8","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c41ec98d-11ea-4b64-99d7-064e18d9aef8","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c41ec98d-11ea-4b64-99d7-064e18d9aef8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c41ec98d-11ea-4b64-99d7-064e18d9aef8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c41ec98d-11ea-4b64-99d7-064e18d9aef8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c41ec98d-11ea-4b64-99d7-064e18d9aef8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c41ec98d-11ea-4b64-99d7-064e18d9aef8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c41ec98d-11ea-4b64-99d7-064e18d9aef8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c41ec98d-11ea-4b64-99d7-064e18d9aef8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92d186dc-b271-4331-b374-4c1c4fdf257f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54352","PortSpecifier":{"PortValue":54352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92d186dc-b271-4331-b374-4c1c4fdf257f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92d186dc-b271-4331-b374-4c1c4fdf257f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54352","PortSpecifier":{"PortValue":54352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999737,"nanos":290113265},"http":{"id":"92d186dc-b271-4331-b374-4c1c4fdf257f","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"92d186dc-b271-4331-b374-4c1c4fdf257f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"92d186dc-b271-4331-b374-4c1c4fdf257f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92d186dc-b271-4331-b374-4c1c4fdf257f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92d186dc-b271-4331-b374-4c1c4fdf257f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92d186dc-b271-4331-b374-4c1c4fdf257f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92d186dc-b271-4331-b374-4c1c4fdf257f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92d186dc-b271-4331-b374-4c1c4fdf257f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92d186dc-b271-4331-b374-4c1c4fdf257f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ffc3b9e-b43c-47e3-8101-ccc2058cc7d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3184","PortSpecifier":{"PortValue":3184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ffc3b9e-b43c-47e3-8101-ccc2058cc7d5","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ffc3b9e-b43c-47e3-8101-ccc2058cc7d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3184","PortSpecifier":{"PortValue":3184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999737,"nanos":325092916},"http":{"id":"7ffc3b9e-b43c-47e3-8101-ccc2058cc7d5","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"7ffc3b9e-b43c-47e3-8101-ccc2058cc7d5","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7ffc3b9e-b43c-47e3-8101-ccc2058cc7d5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ffc3b9e-b43c-47e3-8101-ccc2058cc7d5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ffc3b9e-b43c-47e3-8101-ccc2058cc7d5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ffc3b9e-b43c-47e3-8101-ccc2058cc7d5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ffc3b9e-b43c-47e3-8101-ccc2058cc7d5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ffc3b9e-b43c-47e3-8101-ccc2058cc7d5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ffc3b9e-b43c-47e3-8101-ccc2058cc7d5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eca2fbdf-e7c3-4d3a-90ee-3886545df898","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8828","PortSpecifier":{"PortValue":8828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eca2fbdf-e7c3-4d3a-90ee-3886545df898","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eca2fbdf-e7c3-4d3a-90ee-3886545df898","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8828","PortSpecifier":{"PortValue":8828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999737,"nanos":360156466},"http":{"id":"eca2fbdf-e7c3-4d3a-90ee-3886545df898","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"eca2fbdf-e7c3-4d3a-90ee-3886545df898","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eca2fbdf-e7c3-4d3a-90ee-3886545df898","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eca2fbdf-e7c3-4d3a-90ee-3886545df898","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eca2fbdf-e7c3-4d3a-90ee-3886545df898","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eca2fbdf-e7c3-4d3a-90ee-3886545df898","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eca2fbdf-e7c3-4d3a-90ee-3886545df898","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eca2fbdf-e7c3-4d3a-90ee-3886545df898","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eca2fbdf-e7c3-4d3a-90ee-3886545df898","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d9e894a-70e5-4730-b3ce-79e45149f1c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54368","PortSpecifier":{"PortValue":54368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d9e894a-70e5-4730-b3ce-79e45149f1c7","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d9e894a-70e5-4730-b3ce-79e45149f1c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54368","PortSpecifier":{"PortValue":54368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999737,"nanos":392884453},"http":{"id":"4d9e894a-70e5-4730-b3ce-79e45149f1c7","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"4d9e894a-70e5-4730-b3ce-79e45149f1c7","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4d9e894a-70e5-4730-b3ce-79e45149f1c7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d9e894a-70e5-4730-b3ce-79e45149f1c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d9e894a-70e5-4730-b3ce-79e45149f1c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d9e894a-70e5-4730-b3ce-79e45149f1c7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d9e894a-70e5-4730-b3ce-79e45149f1c7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d9e894a-70e5-4730-b3ce-79e45149f1c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d9e894a-70e5-4730-b3ce-79e45149f1c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2705c7b1-e0b5-436f-89bf-d092dccdcec4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20504","PortSpecifier":{"PortValue":20504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2705c7b1-e0b5-436f-89bf-d092dccdcec4","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2705c7b1-e0b5-436f-89bf-d092dccdcec4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20504","PortSpecifier":{"PortValue":20504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999737,"nanos":426916868},"http":{"id":"2705c7b1-e0b5-436f-89bf-d092dccdcec4","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"2705c7b1-e0b5-436f-89bf-d092dccdcec4","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2705c7b1-e0b5-436f-89bf-d092dccdcec4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2705c7b1-e0b5-436f-89bf-d092dccdcec4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2705c7b1-e0b5-436f-89bf-d092dccdcec4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2705c7b1-e0b5-436f-89bf-d092dccdcec4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2705c7b1-e0b5-436f-89bf-d092dccdcec4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2705c7b1-e0b5-436f-89bf-d092dccdcec4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2705c7b1-e0b5-436f-89bf-d092dccdcec4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a47955f-85d6-47f6-ab29-c1f4165775df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3188","PortSpecifier":{"PortValue":3188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a47955f-85d6-47f6-ab29-c1f4165775df","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a47955f-85d6-47f6-ab29-c1f4165775df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3188","PortSpecifier":{"PortValue":3188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999737,"nanos":460943476},"http":{"id":"8a47955f-85d6-47f6-ab29-c1f4165775df","method":"GET","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"8a47955f-85d6-47f6-ab29-c1f4165775df","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8a47955f-85d6-47f6-ab29-c1f4165775df","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a47955f-85d6-47f6-ab29-c1f4165775df","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a47955f-85d6-47f6-ab29-c1f4165775df","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a47955f-85d6-47f6-ab29-c1f4165775df","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a47955f-85d6-47f6-ab29-c1f4165775df","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a47955f-85d6-47f6-ab29-c1f4165775df","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a47955f-85d6-47f6-ab29-c1f4165775df","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c347add-f1a6-4e16-892c-b9ebdcad0073","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:49070","PortSpecifier":{"PortValue":49070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c347add-f1a6-4e16-892c-b9ebdcad0073","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c347add-f1a6-4e16-892c-b9ebdcad0073","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:49070","PortSpecifier":{"PortValue":49070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999737,"nanos":473322889},"http":{"id":"9c347add-f1a6-4e16-892c-b9ebdcad0073","method":"GET","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9c347add-f1a6-4e16-892c-b9ebdcad0073","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c347add-f1a6-4e16-892c-b9ebdcad0073","config":{"Name":"kubernetes-tokens","Priority":1,"Conditions":{"Left":{"Selector":"request.url_path","Operator":5,"Value":".*/v1/models$"},"Right":{"Left":{"Selector":"request.headers.authorization","Operator":2,"Value":""},"Right":{"Left":null,"Right":null}}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9c347add-f1a6-4e16-892c-b9ebdcad0073","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9c347add-f1a6-4e16-892c-b9ebdcad0073","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c347add-f1a6-4e16-892c-b9ebdcad0073","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}},"metadata":{"subscription-info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.50","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.43~maas-default-gateway-openshift-default-687ff6996-7nlx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.133.0.50","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"9c347add-f1a6-4e16-892c-b9ebdcad0073"},"host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","id":"9c347add-f1a6-4e16-892c-b9ebdcad0073","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":473322889,"seconds":1780999737},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.133.0.50:49070","port":49070}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c347add-f1a6-4e16-892c-b9ebdcad0073","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c347add-f1a6-4e16-892c-b9ebdcad0073","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c347add-f1a6-4e16-892c-b9ebdcad0073","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c347add-f1a6-4e16-892c-b9ebdcad0073","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c347add-f1a6-4e16-892c-b9ebdcad0073","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":""}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c347add-f1a6-4e16-892c-b9ebdcad0073","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: apiKeyValidation"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c347add-f1a6-4e16-892c-b9ebdcad0073","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c347add-f1a6-4e16-892c-b9ebdcad0073","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e012565-e37b-4108-a8e0-32d5bdd4dc64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8830","PortSpecifier":{"PortValue":8830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e012565-e37b-4108-a8e0-32d5bdd4dc64","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e012565-e37b-4108-a8e0-32d5bdd4dc64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8830","PortSpecifier":{"PortValue":8830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999737,"nanos":507916240},"http":{"id":"5e012565-e37b-4108-a8e0-32d5bdd4dc64","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e012565-e37b-4108-a8e0-32d5bdd4dc64","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gTfERi8c31ksWhfU_To8UWtcMwGKpNuAzaeiw1sivwDbuRXCamB9DgO1Dya1"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e012565-e37b-4108-a8e0-32d5bdd4dc64","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gTfERi8c31ksWhfU_To8UWtcMwGKpNuAzaeiw1sivwDbuRXCamB9DgO1Dya1\"}"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e012565-e37b-4108-a8e0-32d5bdd4dc64","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e012565-e37b-4108-a8e0-32d5bdd4dc64","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e012565-e37b-4108-a8e0-32d5bdd4dc64","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e012565-e37b-4108-a8e0-32d5bdd4dc64","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e012565-e37b-4108-a8e0-32d5bdd4dc64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e012565-e37b-4108-a8e0-32d5bdd4dc64","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e012565-e37b-4108-a8e0-32d5bdd4dc64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e012565-e37b-4108-a8e0-32d5bdd4dc64","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e012565-e37b-4108-a8e0-32d5bdd4dc64","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e012565-e37b-4108-a8e0-32d5bdd4dc64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1878c84e-98d8-4e30-9c92-de3d5bac8bd1","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e012565-e37b-4108-a8e0-32d5bdd4dc64","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e012565-e37b-4108-a8e0-32d5bdd4dc64","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0df25a8-b098-42f1-b533-50a5e6efafec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:7626","PortSpecifier":{"PortValue":7626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0df25a8-b098-42f1-b533-50a5e6efafec","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0df25a8-b098-42f1-b533-50a5e6efafec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:7626","PortSpecifier":{"PortValue":7626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999737,"nanos":540699041},"http":{"id":"a0df25a8-b098-42f1-b533-50a5e6efafec","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0df25a8-b098-42f1-b533-50a5e6efafec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-invalid-key-12345"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0df25a8-b098-42f1-b533-50a5e6efafec","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-invalid-key-12345\"}"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0df25a8-b098-42f1-b533-50a5e6efafec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** key format","valid":false}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"a0df25a8-b098-42f1-b533-50a5e6efafec","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0df25a8-b098-42f1-b533-50a5e6efafec","input":{"auth":{"identity":"Bearer **** key format","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a0df25a8-b098-42f1-b533-50a5e6efafec","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0df25a8-b098-42f1-b533-50a5e6efafec","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0df25a8-b098-42f1-b533-50a5e6efafec","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38fa0c6d-6b08-4b22-a0a4-ecc3c09166d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54376","PortSpecifier":{"PortValue":54376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"38fa0c6d-6b08-4b22-a0a4-ecc3c09166d3","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38fa0c6d-6b08-4b22-a0a4-ecc3c09166d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54376","PortSpecifier":{"PortValue":54376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999737,"nanos":567070405},"http":{"id":"38fa0c6d-6b08-4b22-a0a4-ecc3c09166d3","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.43~maas-default-gateway-openshift-default-687ff6996-7nlx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"38fa0c6d-6b08-4b22-a0a4-ecc3c09166d3"},"path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"metadata_context":{}}}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38fa0c6d-6b08-4b22-a0a4-ecc3c09166d3","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38fa0c6d-6b08-4b22-a0a4-ecc3c09166d3","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4633efe3-b390-4c7d-ab95-38dacd2ab566","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3200","PortSpecifier":{"PortValue":3200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4633efe3-b390-4c7d-ab95-38dacd2ab566","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4633efe3-b390-4c7d-ab95-38dacd2ab566","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3200","PortSpecifier":{"PortValue":3200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999737,"nanos":590376605},"http":{"id":"4633efe3-b390-4c7d-ab95-38dacd2ab566","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"4633efe3-b390-4c7d-ab95-38dacd2ab566","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4633efe3-b390-4c7d-ab95-38dacd2ab566","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4633efe3-b390-4c7d-ab95-38dacd2ab566","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4633efe3-b390-4c7d-ab95-38dacd2ab566","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4633efe3-b390-4c7d-ab95-38dacd2ab566","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4633efe3-b390-4c7d-ab95-38dacd2ab566","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4633efe3-b390-4c7d-ab95-38dacd2ab566","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4633efe3-b390-4c7d-ab95-38dacd2ab566","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fc82a18-d512-4452-b311-98749cd70d09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8832","PortSpecifier":{"PortValue":8832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6fc82a18-d512-4452-b311-98749cd70d09","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fc82a18-d512-4452-b311-98749cd70d09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8832","PortSpecifier":{"PortValue":8832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999737,"nanos":623617510},"http":{"id":"6fc82a18-d512-4452-b311-98749cd70d09","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6fc82a18-d512-4452-b311-98749cd70d09","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EuN148j9LBwzsDfj_AxT78BTOD2eD1yN7UfTJQTsygGJ6co4JB4Q9gu1PhRU"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6fc82a18-d512-4452-b311-98749cd70d09","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EuN148j9LBwzsDfj_AxT78BTOD2eD1yN7UfTJQTsygGJ6co4JB4Q9gu1PhRU\"}"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6fc82a18-d512-4452-b311-98749cd70d09","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6fc82a18-d512-4452-b311-98749cd70d09","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6fc82a18-d512-4452-b311-98749cd70d09","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6fc82a18-d512-4452-b311-98749cd70d09","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fc82a18-d512-4452-b311-98749cd70d09","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fc82a18-d512-4452-b311-98749cd70d09","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fc82a18-d512-4452-b311-98749cd70d09","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fc82a18-d512-4452-b311-98749cd70d09","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fc82a18-d512-4452-b311-98749cd70d09","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fc82a18-d512-4452-b311-98749cd70d09","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"099c3f02-c6bd-4b5a-8e7f-58cecd609927","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fc82a18-d512-4452-b311-98749cd70d09","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fc82a18-d512-4452-b311-98749cd70d09","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0b6d1ab-8183-49c5-8dd8-40d4fa053e7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54384","PortSpecifier":{"PortValue":54384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0b6d1ab-8183-49c5-8dd8-40d4fa053e7c","method":"DELETE","path":"/maas-api/v1/api-keys/099c3f02-c6bd-4b5a-8e7f-58cecd609927","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0b6d1ab-8183-49c5-8dd8-40d4fa053e7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54384","PortSpecifier":{"PortValue":54384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999737,"nanos":656022493},"http":{"id":"d0b6d1ab-8183-49c5-8dd8-40d4fa053e7c","method":"DELETE","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/099c3f02-c6bd-4b5a-8e7f-58cecd609927",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"d0b6d1ab-8183-49c5-8dd8-40d4fa053e7c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d0b6d1ab-8183-49c5-8dd8-40d4fa053e7c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0b6d1ab-8183-49c5-8dd8-40d4fa053e7c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0b6d1ab-8183-49c5-8dd8-40d4fa053e7c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/099c3f02-c6bd-4b5a-8e7f-58cecd609927",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0b6d1ab-8183-49c5-8dd8-40d4fa053e7c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0b6d1ab-8183-49c5-8dd8-40d4fa053e7c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0b6d1ab-8183-49c5-8dd8-40d4fa053e7c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0b6d1ab-8183-49c5-8dd8-40d4fa053e7c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49b9f907-9bb4-4645-842b-f96640116f21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52510","PortSpecifier":{"PortValue":52510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"49b9f907-9bb4-4645-842b-f96640116f21","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49b9f907-9bb4-4645-842b-f96640116f21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52510","PortSpecifier":{"PortValue":52510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999739,"nanos":694086779},"http":{"id":"49b9f907-9bb4-4645-842b-f96640116f21","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"49b9f907-9bb4-4645-842b-f96640116f21","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EuN148j9LBwzsDfj_AxT78BTOD2eD1yN7UfTJQTsygGJ6co4JB4Q9gu1PhRU"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"49b9f907-9bb4-4645-842b-f96640116f21","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EuN148j9LBwzsDfj_AxT78BTOD2eD1yN7UfTJQTsygGJ6co4JB4Q9gu1PhRU\"}"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"49b9f907-9bb4-4645-842b-f96640116f21","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"49b9f907-9bb4-4645-842b-f96640116f21","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"49b9f907-9bb4-4645-842b-f96640116f21","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"49b9f907-9bb4-4645-842b-f96640116f21","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49b9f907-9bb4-4645-842b-f96640116f21","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49b9f907-9bb4-4645-842b-f96640116f21","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"813c51e5-ff83-4781-8b75-b9a1e782fd40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23580","PortSpecifier":{"PortValue":23580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"813c51e5-ff83-4781-8b75-b9a1e782fd40","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"813c51e5-ff83-4781-8b75-b9a1e782fd40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23580","PortSpecifier":{"PortValue":23580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999739,"nanos":725263929},"http":{"id":"813c51e5-ff83-4781-8b75-b9a1e782fd40","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"813c51e5-ff83-4781-8b75-b9a1e782fd40","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gTfERi8c31ksWhfU_To8UWtcMwGKpNuAzaeiw1sivwDbuRXCamB9DgO1Dya1"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"813c51e5-ff83-4781-8b75-b9a1e782fd40","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gTfERi8c31ksWhfU_To8UWtcMwGKpNuAzaeiw1sivwDbuRXCamB9DgO1Dya1\"}"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"813c51e5-ff83-4781-8b75-b9a1e782fd40","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"813c51e5-ff83-4781-8b75-b9a1e782fd40","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"813c51e5-ff83-4781-8b75-b9a1e782fd40","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"813c51e5-ff83-4781-8b75-b9a1e782fd40","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"813c51e5-ff83-4781-8b75-b9a1e782fd40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"813c51e5-ff83-4781-8b75-b9a1e782fd40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"813c51e5-ff83-4781-8b75-b9a1e782fd40","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"813c51e5-ff83-4781-8b75-b9a1e782fd40","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"813c51e5-ff83-4781-8b75-b9a1e782fd40","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"813c51e5-ff83-4781-8b75-b9a1e782fd40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1878c84e-98d8-4e30-9c92-de3d5bac8bd1","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"813c51e5-ff83-4781-8b75-b9a1e782fd40","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"813c51e5-ff83-4781-8b75-b9a1e782fd40","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"573d3a8c-eb63-4ac1-be4a-a2c0600ed11f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53176","PortSpecifier":{"PortValue":53176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"573d3a8c-eb63-4ac1-be4a-a2c0600ed11f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"573d3a8c-eb63-4ac1-be4a-a2c0600ed11f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53176","PortSpecifier":{"PortValue":53176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999739,"nanos":756939706},"http":{"id":"573d3a8c-eb63-4ac1-be4a-a2c0600ed11f","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"573d3a8c-eb63-4ac1-be4a-a2c0600ed11f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"573d3a8c-eb63-4ac1-be4a-a2c0600ed11f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"573d3a8c-eb63-4ac1-be4a-a2c0600ed11f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"573d3a8c-eb63-4ac1-be4a-a2c0600ed11f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"573d3a8c-eb63-4ac1-be4a-a2c0600ed11f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"573d3a8c-eb63-4ac1-be4a-a2c0600ed11f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"573d3a8c-eb63-4ac1-be4a-a2c0600ed11f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"573d3a8c-eb63-4ac1-be4a-a2c0600ed11f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adb3ec6f-6339-4d57-a713-da501dfdbd6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:1102","PortSpecifier":{"PortValue":1102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"adb3ec6f-6339-4d57-a713-da501dfdbd6f","method":"DELETE","path":"/maas-api/v1/api-keys/908a6837-c214-401f-98b5-cf18aa5c6aa7","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adb3ec6f-6339-4d57-a713-da501dfdbd6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:1102","PortSpecifier":{"PortValue":1102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999739,"nanos":792360981},"http":{"id":"adb3ec6f-6339-4d57-a713-da501dfdbd6f","method":"DELETE","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/908a6837-c214-401f-98b5-cf18aa5c6aa7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"adb3ec6f-6339-4d57-a713-da501dfdbd6f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"adb3ec6f-6339-4d57-a713-da501dfdbd6f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"adb3ec6f-6339-4d57-a713-da501dfdbd6f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"adb3ec6f-6339-4d57-a713-da501dfdbd6f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/908a6837-c214-401f-98b5-cf18aa5c6aa7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adb3ec6f-6339-4d57-a713-da501dfdbd6f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adb3ec6f-6339-4d57-a713-da501dfdbd6f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adb3ec6f-6339-4d57-a713-da501dfdbd6f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adb3ec6f-6339-4d57-a713-da501dfdbd6f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87c27d80-89e0-4c09-bdd6-d99e718d7f99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52522","PortSpecifier":{"PortValue":52522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87c27d80-89e0-4c09-bdd6-d99e718d7f99","method":"DELETE","path":"/maas-api/v1/api-keys/908a6837-c214-401f-98b5-cf18aa5c6aa7","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87c27d80-89e0-4c09-bdd6-d99e718d7f99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52522","PortSpecifier":{"PortValue":52522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999739,"nanos":823227493},"http":{"id":"87c27d80-89e0-4c09-bdd6-d99e718d7f99","method":"DELETE","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/908a6837-c214-401f-98b5-cf18aa5c6aa7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"87c27d80-89e0-4c09-bdd6-d99e718d7f99","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87c27d80-89e0-4c09-bdd6-d99e718d7f99","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87c27d80-89e0-4c09-bdd6-d99e718d7f99","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87c27d80-89e0-4c09-bdd6-d99e718d7f99","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/908a6837-c214-401f-98b5-cf18aa5c6aa7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c27d80-89e0-4c09-bdd6-d99e718d7f99","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c27d80-89e0-4c09-bdd6-d99e718d7f99","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87c27d80-89e0-4c09-bdd6-d99e718d7f99","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87c27d80-89e0-4c09-bdd6-d99e718d7f99","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"841802d0-5e17-47fc-a9c8-b29e9363e9cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53190","PortSpecifier":{"PortValue":53190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"841802d0-5e17-47fc-a9c8-b29e9363e9cd","method":"DELETE","path":"/maas-api/v1/api-keys/nonexistent-uuid-12345","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"841802d0-5e17-47fc-a9c8-b29e9363e9cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53190","PortSpecifier":{"PortValue":53190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999739,"nanos":861040228},"http":{"id":"841802d0-5e17-47fc-a9c8-b29e9363e9cd","method":"DELETE","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/nonexistent-uuid-12345",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"841802d0-5e17-47fc-a9c8-b29e9363e9cd","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"841802d0-5e17-47fc-a9c8-b29e9363e9cd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"841802d0-5e17-47fc-a9c8-b29e9363e9cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"841802d0-5e17-47fc-a9c8-b29e9363e9cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/nonexistent-uuid-12345",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"841802d0-5e17-47fc-a9c8-b29e9363e9cd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"841802d0-5e17-47fc-a9c8-b29e9363e9cd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"841802d0-5e17-47fc-a9c8-b29e9363e9cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"841802d0-5e17-47fc-a9c8-b29e9363e9cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3b48491-b62c-46eb-aa2d-c8b0d6c15828","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:1118","PortSpecifier":{"PortValue":1118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3b48491-b62c-46eb-aa2d-c8b0d6c15828","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3b48491-b62c-46eb-aa2d-c8b0d6c15828","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:1118","PortSpecifier":{"PortValue":1118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999739,"nanos":896056548},"http":{"id":"d3b48491-b62c-46eb-aa2d-c8b0d6c15828","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"d3b48491-b62c-46eb-aa2d-c8b0d6c15828","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d3b48491-b62c-46eb-aa2d-c8b0d6c15828","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3b48491-b62c-46eb-aa2d-c8b0d6c15828","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3b48491-b62c-46eb-aa2d-c8b0d6c15828","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3b48491-b62c-46eb-aa2d-c8b0d6c15828","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3b48491-b62c-46eb-aa2d-c8b0d6c15828","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3b48491-b62c-46eb-aa2d-c8b0d6c15828","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3b48491-b62c-46eb-aa2d-c8b0d6c15828","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82c0622c-e414-45b7-ae59-408ef821f930","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20516","PortSpecifier":{"PortValue":20516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82c0622c-e414-45b7-ae59-408ef821f930","method":"DELETE","path":"/maas-api/v1/api-keys/5d3d6e1d-37af-46c9-aaa4-c3e7178174ab","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82c0622c-e414-45b7-ae59-408ef821f930","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20516","PortSpecifier":{"PortValue":20516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999739,"nanos":928318453},"http":{"id":"82c0622c-e414-45b7-ae59-408ef821f930","method":"DELETE","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/5d3d6e1d-37af-46c9-aaa4-c3e7178174ab",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"82c0622c-e414-45b7-ae59-408ef821f930","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"82c0622c-e414-45b7-ae59-408ef821f930","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82c0622c-e414-45b7-ae59-408ef821f930","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82c0622c-e414-45b7-ae59-408ef821f930","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/5d3d6e1d-37af-46c9-aaa4-c3e7178174ab",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82c0622c-e414-45b7-ae59-408ef821f930","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82c0622c-e414-45b7-ae59-408ef821f930","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82c0622c-e414-45b7-ae59-408ef821f930","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82c0622c-e414-45b7-ae59-408ef821f930","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52186a8d-dc5b-4ccb-a4f6-d36deb2e90a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52536","PortSpecifier":{"PortValue":52536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52186a8d-dc5b-4ccb-a4f6-d36deb2e90a9","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52186a8d-dc5b-4ccb-a4f6-d36deb2e90a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52536","PortSpecifier":{"PortValue":52536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999739,"nanos":962975257},"http":{"id":"52186a8d-dc5b-4ccb-a4f6-d36deb2e90a9","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"52186a8d-dc5b-4ccb-a4f6-d36deb2e90a9","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52186a8d-dc5b-4ccb-a4f6-d36deb2e90a9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52186a8d-dc5b-4ccb-a4f6-d36deb2e90a9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52186a8d-dc5b-4ccb-a4f6-d36deb2e90a9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52186a8d-dc5b-4ccb-a4f6-d36deb2e90a9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52186a8d-dc5b-4ccb-a4f6-d36deb2e90a9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52186a8d-dc5b-4ccb-a4f6-d36deb2e90a9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52186a8d-dc5b-4ccb-a4f6-d36deb2e90a9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ad66540-0301-475c-9f1c-26d04dcc65c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53196","PortSpecifier":{"PortValue":53196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ad66540-0301-475c-9f1c-26d04dcc65c6","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ad66540-0301-475c-9f1c-26d04dcc65c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53196","PortSpecifier":{"PortValue":53196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999739,"nanos":996052260},"http":{"id":"1ad66540-0301-475c-9f1c-26d04dcc65c6","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ad66540-0301-475c-9f1c-26d04dcc65c6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Lh89MDII17JtrHFZ_Rk7pZGyn1NpLL0LZGbO8cL4HBoGLtNw045hzUL5gUGz"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ad66540-0301-475c-9f1c-26d04dcc65c6","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Lh89MDII17JtrHFZ_Rk7pZGyn1NpLL0LZGbO8cL4HBoGLtNw045hzUL5gUGz\"}"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ad66540-0301-475c-9f1c-26d04dcc65c6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"1ad66540-0301-475c-9f1c-26d04dcc65c6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-06-09T10:08:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ad66540-0301-475c-9f1c-26d04dcc65c6","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"1ad66540-0301-475c-9f1c-26d04dcc65c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ad66540-0301-475c-9f1c-26d04dcc65c6","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ad66540-0301-475c-9f1c-26d04dcc65c6","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7ffcf2c-3be0-418b-9d65-6057eb2c43f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:1124","PortSpecifier":{"PortValue":1124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7ffcf2c-3be0-418b-9d65-6057eb2c43f2","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7ffcf2c-3be0-418b-9d65-6057eb2c43f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:1124","PortSpecifier":{"PortValue":1124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999740,"nanos":28062707},"http":{"id":"d7ffcf2c-3be0-418b-9d65-6057eb2c43f2","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7ffcf2c-3be0-418b-9d65-6057eb2c43f2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bIqrJrxQtBaEWqrC_B9fzICELs1UaGLmLxs3P1YXS0pOTE7Eb4wrrAMz9akX"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d7ffcf2c-3be0-418b-9d65-6057eb2c43f2","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bIqrJrxQtBaEWqrC_B9fzICELs1UaGLmLxs3P1YXS0pOTE7Eb4wrrAMz9akX\"}"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d7ffcf2c-3be0-418b-9d65-6057eb2c43f2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d7ffcf2c-3be0-418b-9d65-6057eb2c43f2","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d7ffcf2c-3be0-418b-9d65-6057eb2c43f2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7ffcf2c-3be0-418b-9d65-6057eb2c43f2","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7ffcf2c-3be0-418b-9d65-6057eb2c43f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7ffcf2c-3be0-418b-9d65-6057eb2c43f2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7ffcf2c-3be0-418b-9d65-6057eb2c43f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7ffcf2c-3be0-418b-9d65-6057eb2c43f2","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7ffcf2c-3be0-418b-9d65-6057eb2c43f2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7ffcf2c-3be0-418b-9d65-6057eb2c43f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2388b2df-1fa9-479e-9461-9903b18244c9","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7ffcf2c-3be0-418b-9d65-6057eb2c43f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7ffcf2c-3be0-418b-9d65-6057eb2c43f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c868b499-aa37-403f-85ee-fcbab6a5e513","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52538","PortSpecifier":{"PortValue":52538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c868b499-aa37-403f-85ee-fcbab6a5e513","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c868b499-aa37-403f-85ee-fcbab6a5e513","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52538","PortSpecifier":{"PortValue":52538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999740,"nanos":62580354},"http":{"id":"c868b499-aa37-403f-85ee-fcbab6a5e513","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c868b499-aa37-403f-85ee-fcbab6a5e513","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c868b499-aa37-403f-85ee-fcbab6a5e513","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c868b499-aa37-403f-85ee-fcbab6a5e513","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c868b499-aa37-403f-85ee-fcbab6a5e513","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c868b499-aa37-403f-85ee-fcbab6a5e513","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c868b499-aa37-403f-85ee-fcbab6a5e513","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c868b499-aa37-403f-85ee-fcbab6a5e513","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c868b499-aa37-403f-85ee-fcbab6a5e513","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7521beea-2d87-4281-8579-2292ee1c6067","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53202","PortSpecifier":{"PortValue":53202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7521beea-2d87-4281-8579-2292ee1c6067","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7521beea-2d87-4281-8579-2292ee1c6067","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53202","PortSpecifier":{"PortValue":53202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999740,"nanos":97225989},"http":{"id":"7521beea-2d87-4281-8579-2292ee1c6067","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"7521beea-2d87-4281-8579-2292ee1c6067","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7521beea-2d87-4281-8579-2292ee1c6067","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7521beea-2d87-4281-8579-2292ee1c6067","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7521beea-2d87-4281-8579-2292ee1c6067","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7521beea-2d87-4281-8579-2292ee1c6067","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7521beea-2d87-4281-8579-2292ee1c6067","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7521beea-2d87-4281-8579-2292ee1c6067","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7521beea-2d87-4281-8579-2292ee1c6067","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dabc208-dee5-47c3-9566-687c6f184dfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:7632","PortSpecifier":{"PortValue":7632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3dabc208-dee5-47c3-9566-687c6f184dfe","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dabc208-dee5-47c3-9566-687c6f184dfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:7632","PortSpecifier":{"PortValue":7632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999740,"nanos":136872367},"http":{"id":"3dabc208-dee5-47c3-9566-687c6f184dfe","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"3dabc208-dee5-47c3-9566-687c6f184dfe","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3dabc208-dee5-47c3-9566-687c6f184dfe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3dabc208-dee5-47c3-9566-687c6f184dfe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3dabc208-dee5-47c3-9566-687c6f184dfe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dabc208-dee5-47c3-9566-687c6f184dfe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dabc208-dee5-47c3-9566-687c6f184dfe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dabc208-dee5-47c3-9566-687c6f184dfe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dabc208-dee5-47c3-9566-687c6f184dfe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48542cad-bb2a-4df2-a2f0-72e56b5956e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:1132","PortSpecifier":{"PortValue":1132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48542cad-bb2a-4df2-a2f0-72e56b5956e6","method":"DELETE","path":"/maas-api/v1/api-keys/4504247f-bcba-4b11-ae67-6f24bf4b02b4","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48542cad-bb2a-4df2-a2f0-72e56b5956e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:1132","PortSpecifier":{"PortValue":1132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999740,"nanos":169272434},"http":{"id":"48542cad-bb2a-4df2-a2f0-72e56b5956e6","method":"DELETE","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/4504247f-bcba-4b11-ae67-6f24bf4b02b4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"48542cad-bb2a-4df2-a2f0-72e56b5956e6","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"48542cad-bb2a-4df2-a2f0-72e56b5956e6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48542cad-bb2a-4df2-a2f0-72e56b5956e6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48542cad-bb2a-4df2-a2f0-72e56b5956e6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/4504247f-bcba-4b11-ae67-6f24bf4b02b4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48542cad-bb2a-4df2-a2f0-72e56b5956e6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48542cad-bb2a-4df2-a2f0-72e56b5956e6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48542cad-bb2a-4df2-a2f0-72e56b5956e6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48542cad-bb2a-4df2-a2f0-72e56b5956e6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"664850ff-b78f-4793-8b8f-6880f75c25e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23586","PortSpecifier":{"PortValue":23586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"664850ff-b78f-4793-8b8f-6880f75c25e3","method":"DELETE","path":"/maas-api/v1/api-keys/1e085fce-c975-487e-92a4-0457011152e4","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"664850ff-b78f-4793-8b8f-6880f75c25e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23586","PortSpecifier":{"PortValue":23586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999740,"nanos":202448356},"http":{"id":"664850ff-b78f-4793-8b8f-6880f75c25e3","method":"DELETE","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/1e085fce-c975-487e-92a4-0457011152e4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"664850ff-b78f-4793-8b8f-6880f75c25e3","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"664850ff-b78f-4793-8b8f-6880f75c25e3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"664850ff-b78f-4793-8b8f-6880f75c25e3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"664850ff-b78f-4793-8b8f-6880f75c25e3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/1e085fce-c975-487e-92a4-0457011152e4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"664850ff-b78f-4793-8b8f-6880f75c25e3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"664850ff-b78f-4793-8b8f-6880f75c25e3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"664850ff-b78f-4793-8b8f-6880f75c25e3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"664850ff-b78f-4793-8b8f-6880f75c25e3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3689091-0e62-4970-959c-483fa5ad154d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52542","PortSpecifier":{"PortValue":52542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3689091-0e62-4970-959c-483fa5ad154d","method":"DELETE","path":"/maas-api/v1/api-keys/6e0f6f37-b354-40c3-ba36-a8ce50b306a7","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3689091-0e62-4970-959c-483fa5ad154d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52542","PortSpecifier":{"PortValue":52542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999740,"nanos":236208862},"http":{"id":"e3689091-0e62-4970-959c-483fa5ad154d","method":"DELETE","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/6e0f6f37-b354-40c3-ba36-a8ce50b306a7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"e3689091-0e62-4970-959c-483fa5ad154d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e3689091-0e62-4970-959c-483fa5ad154d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3689091-0e62-4970-959c-483fa5ad154d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3689091-0e62-4970-959c-483fa5ad154d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/6e0f6f37-b354-40c3-ba36-a8ce50b306a7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3689091-0e62-4970-959c-483fa5ad154d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3689091-0e62-4970-959c-483fa5ad154d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3689091-0e62-4970-959c-483fa5ad154d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3689091-0e62-4970-959c-483fa5ad154d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23d01c66-2b4a-423b-b9ab-dbb4f54ee098","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20518","PortSpecifier":{"PortValue":20518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23d01c66-2b4a-423b-b9ab-dbb4f54ee098","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23d01c66-2b4a-423b-b9ab-dbb4f54ee098","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20518","PortSpecifier":{"PortValue":20518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999740,"nanos":272032668},"http":{"id":"23d01c66-2b4a-423b-b9ab-dbb4f54ee098","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"23d01c66-2b4a-423b-b9ab-dbb4f54ee098","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"23d01c66-2b4a-423b-b9ab-dbb4f54ee098","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23d01c66-2b4a-423b-b9ab-dbb4f54ee098","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23d01c66-2b4a-423b-b9ab-dbb4f54ee098","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23d01c66-2b4a-423b-b9ab-dbb4f54ee098","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23d01c66-2b4a-423b-b9ab-dbb4f54ee098","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23d01c66-2b4a-423b-b9ab-dbb4f54ee098","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23d01c66-2b4a-423b-b9ab-dbb4f54ee098","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d16c5efb-b7e2-4c32-98a1-54c182741544","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53216","PortSpecifier":{"PortValue":53216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d16c5efb-b7e2-4c32-98a1-54c182741544","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d16c5efb-b7e2-4c32-98a1-54c182741544","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53216","PortSpecifier":{"PortValue":53216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999740,"nanos":305406567},"http":{"id":"d16c5efb-b7e2-4c32-98a1-54c182741544","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"d16c5efb-b7e2-4c32-98a1-54c182741544","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d16c5efb-b7e2-4c32-98a1-54c182741544","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d16c5efb-b7e2-4c32-98a1-54c182741544","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d16c5efb-b7e2-4c32-98a1-54c182741544","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d16c5efb-b7e2-4c32-98a1-54c182741544","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d16c5efb-b7e2-4c32-98a1-54c182741544","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d16c5efb-b7e2-4c32-98a1-54c182741544","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d16c5efb-b7e2-4c32-98a1-54c182741544","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"879a4879-faf5-4002-98fc-8ade3cc5f5ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:1138","PortSpecifier":{"PortValue":1138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"879a4879-faf5-4002-98fc-8ade3cc5f5ce","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"879a4879-faf5-4002-98fc-8ade3cc5f5ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:1138","PortSpecifier":{"PortValue":1138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999740,"nanos":340017753},"http":{"id":"879a4879-faf5-4002-98fc-8ade3cc5f5ce","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"879a4879-faf5-4002-98fc-8ade3cc5f5ce","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"879a4879-faf5-4002-98fc-8ade3cc5f5ce","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"879a4879-faf5-4002-98fc-8ade3cc5f5ce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"879a4879-faf5-4002-98fc-8ade3cc5f5ce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"879a4879-faf5-4002-98fc-8ade3cc5f5ce","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"879a4879-faf5-4002-98fc-8ade3cc5f5ce","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"879a4879-faf5-4002-98fc-8ade3cc5f5ce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"879a4879-faf5-4002-98fc-8ade3cc5f5ce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37dfd979-2532-4fec-aa02-cc276b03b470","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52544","PortSpecifier":{"PortValue":52544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37dfd979-2532-4fec-aa02-cc276b03b470","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37dfd979-2532-4fec-aa02-cc276b03b470","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52544","PortSpecifier":{"PortValue":52544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999740,"nanos":376402655},"http":{"id":"37dfd979-2532-4fec-aa02-cc276b03b470","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37dfd979-2532-4fec-aa02-cc276b03b470","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-V6A01PeEz6Z5LGtb_DWwIQJkzYTTUUyz6U2EYb7E7VuIS7VrkMsMVbvTbCj"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"37dfd979-2532-4fec-aa02-cc276b03b470","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-V6A01PeEz6Z5LGtb_DWwIQJkzYTTUUyz6U2EYb7E7VuIS7VrkMsMVbvTbCj\"}"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"37dfd979-2532-4fec-aa02-cc276b03b470","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"37dfd979-2532-4fec-aa02-cc276b03b470","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"37dfd979-2532-4fec-aa02-cc276b03b470","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37dfd979-2532-4fec-aa02-cc276b03b470","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37dfd979-2532-4fec-aa02-cc276b03b470","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37dfd979-2532-4fec-aa02-cc276b03b470","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37dfd979-2532-4fec-aa02-cc276b03b470","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37dfd979-2532-4fec-aa02-cc276b03b470","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37dfd979-2532-4fec-aa02-cc276b03b470","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37dfd979-2532-4fec-aa02-cc276b03b470","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0aa575c4-b4e4-4d14-a25e-f491245e402a","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37dfd979-2532-4fec-aa02-cc276b03b470","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37dfd979-2532-4fec-aa02-cc276b03b470","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1020b6c9-3d4b-4fdc-a80b-3561bc1d3228","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53218","PortSpecifier":{"PortValue":53218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1020b6c9-3d4b-4fdc-a80b-3561bc1d3228","method":"DELETE","path":"/maas-api/v1/api-keys/0aa575c4-b4e4-4d14-a25e-f491245e402a","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1020b6c9-3d4b-4fdc-a80b-3561bc1d3228","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53218","PortSpecifier":{"PortValue":53218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999740,"nanos":407116907},"http":{"id":"1020b6c9-3d4b-4fdc-a80b-3561bc1d3228","method":"DELETE","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/0aa575c4-b4e4-4d14-a25e-f491245e402a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"1020b6c9-3d4b-4fdc-a80b-3561bc1d3228","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1020b6c9-3d4b-4fdc-a80b-3561bc1d3228","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1020b6c9-3d4b-4fdc-a80b-3561bc1d3228","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1020b6c9-3d4b-4fdc-a80b-3561bc1d3228","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/0aa575c4-b4e4-4d14-a25e-f491245e402a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1020b6c9-3d4b-4fdc-a80b-3561bc1d3228","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1020b6c9-3d4b-4fdc-a80b-3561bc1d3228","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1020b6c9-3d4b-4fdc-a80b-3561bc1d3228","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1020b6c9-3d4b-4fdc-a80b-3561bc1d3228","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26d46167-7674-4f7f-8f91-4a430cd54273","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:1142","PortSpecifier":{"PortValue":1142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26d46167-7674-4f7f-8f91-4a430cd54273","method":"DELETE","path":"/maas-api/v1/api-keys/410e24cb-fcaf-445e-83f6-b59c03b5567c","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26d46167-7674-4f7f-8f91-4a430cd54273","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:1142","PortSpecifier":{"PortValue":1142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999740,"nanos":439211411},"http":{"id":"26d46167-7674-4f7f-8f91-4a430cd54273","method":"DELETE","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/410e24cb-fcaf-445e-83f6-b59c03b5567c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"26d46167-7674-4f7f-8f91-4a430cd54273","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"26d46167-7674-4f7f-8f91-4a430cd54273","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26d46167-7674-4f7f-8f91-4a430cd54273","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26d46167-7674-4f7f-8f91-4a430cd54273","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/410e24cb-fcaf-445e-83f6-b59c03b5567c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26d46167-7674-4f7f-8f91-4a430cd54273","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26d46167-7674-4f7f-8f91-4a430cd54273","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26d46167-7674-4f7f-8f91-4a430cd54273","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26d46167-7674-4f7f-8f91-4a430cd54273","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f41d0d81-9c40-4b0d-911d-35550c61b857","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52558","PortSpecifier":{"PortValue":52558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f41d0d81-9c40-4b0d-911d-35550c61b857","method":"DELETE","path":"/maas-api/v1/api-keys/30b2ffba-9032-4f0a-8d1e-e3d770cf178b","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f41d0d81-9c40-4b0d-911d-35550c61b857","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52558","PortSpecifier":{"PortValue":52558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999740,"nanos":473317550},"http":{"id":"f41d0d81-9c40-4b0d-911d-35550c61b857","method":"DELETE","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/30b2ffba-9032-4f0a-8d1e-e3d770cf178b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"f41d0d81-9c40-4b0d-911d-35550c61b857","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f41d0d81-9c40-4b0d-911d-35550c61b857","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f41d0d81-9c40-4b0d-911d-35550c61b857","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f41d0d81-9c40-4b0d-911d-35550c61b857","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/30b2ffba-9032-4f0a-8d1e-e3d770cf178b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f41d0d81-9c40-4b0d-911d-35550c61b857","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f41d0d81-9c40-4b0d-911d-35550c61b857","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f41d0d81-9c40-4b0d-911d-35550c61b857","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f41d0d81-9c40-4b0d-911d-35550c61b857","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79a342d6-89d8-491a-afcf-b681de9a04c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53220","PortSpecifier":{"PortValue":53220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79a342d6-89d8-491a-afcf-b681de9a04c6","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79a342d6-89d8-491a-afcf-b681de9a04c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53220","PortSpecifier":{"PortValue":53220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999740,"nanos":507598669},"http":{"id":"79a342d6-89d8-491a-afcf-b681de9a04c6","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79a342d6-89d8-491a-afcf-b681de9a04c6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-V6A01PeEz6Z5LGtb_DWwIQJkzYTTUUyz6U2EYb7E7VuIS7VrkMsMVbvTbCj"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79a342d6-89d8-491a-afcf-b681de9a04c6","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-V6A01PeEz6Z5LGtb_DWwIQJkzYTTUUyz6U2EYb7E7VuIS7VrkMsMVbvTbCj\"}"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79a342d6-89d8-491a-afcf-b681de9a04c6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"79a342d6-89d8-491a-afcf-b681de9a04c6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79a342d6-89d8-491a-afcf-b681de9a04c6","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"79a342d6-89d8-491a-afcf-b681de9a04c6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79a342d6-89d8-491a-afcf-b681de9a04c6","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79a342d6-89d8-491a-afcf-b681de9a04c6","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e94ddf64-c799-41fe-82bf-bfc648c5da83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:1158","PortSpecifier":{"PortValue":1158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e94ddf64-c799-41fe-82bf-bfc648c5da83","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e94ddf64-c799-41fe-82bf-bfc648c5da83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:1158","PortSpecifier":{"PortValue":1158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999740,"nanos":530933100},"http":{"id":"e94ddf64-c799-41fe-82bf-bfc648c5da83","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e94ddf64-c799-41fe-82bf-bfc648c5da83","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ak6GYMmByGLr27T6_MJuNQeKJxMCQJXSclvCW7YyNWCMmr8ncqVgza79a2c7"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e94ddf64-c799-41fe-82bf-bfc648c5da83","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ak6GYMmByGLr27T6_MJuNQeKJxMCQJXSclvCW7YyNWCMmr8ncqVgza79a2c7\"}"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e94ddf64-c799-41fe-82bf-bfc648c5da83","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"e94ddf64-c799-41fe-82bf-bfc648c5da83","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e94ddf64-c799-41fe-82bf-bfc648c5da83","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"e94ddf64-c799-41fe-82bf-bfc648c5da83","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e94ddf64-c799-41fe-82bf-bfc648c5da83","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e94ddf64-c799-41fe-82bf-bfc648c5da83","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4de2cbf3-7c87-42fc-8d1e-abff0fbd4bd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52574","PortSpecifier":{"PortValue":52574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4de2cbf3-7c87-42fc-8d1e-abff0fbd4bd8","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4de2cbf3-7c87-42fc-8d1e-abff0fbd4bd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52574","PortSpecifier":{"PortValue":52574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999740,"nanos":554809710},"http":{"id":"4de2cbf3-7c87-42fc-8d1e-abff0fbd4bd8","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4de2cbf3-7c87-42fc-8d1e-abff0fbd4bd8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-l7dQctp1gffLaAfh_hqNYAOpyrLe97xyTbKAQhxslLxi5W7AQkU34mSQepoO"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4de2cbf3-7c87-42fc-8d1e-abff0fbd4bd8","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-l7dQctp1gffLaAfh_hqNYAOpyrLe97xyTbKAQhxslLxi5W7AQkU34mSQepoO\"}"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4de2cbf3-7c87-42fc-8d1e-abff0fbd4bd8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"4de2cbf3-7c87-42fc-8d1e-abff0fbd4bd8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4de2cbf3-7c87-42fc-8d1e-abff0fbd4bd8","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"4de2cbf3-7c87-42fc-8d1e-abff0fbd4bd8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4de2cbf3-7c87-42fc-8d1e-abff0fbd4bd8","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4de2cbf3-7c87-42fc-8d1e-abff0fbd4bd8","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5ed3931-9e16-45dc-ae2d-7502eee8ca10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:7640","PortSpecifier":{"PortValue":7640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5ed3931-9e16-45dc-ae2d-7502eee8ca10","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5ed3931-9e16-45dc-ae2d-7502eee8ca10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:7640","PortSpecifier":{"PortValue":7640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999740,"nanos":812285949},"http":{"id":"c5ed3931-9e16-45dc-ae2d-7502eee8ca10","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c5ed3931-9e16-45dc-ae2d-7502eee8ca10","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c5ed3931-9e16-45dc-ae2d-7502eee8ca10","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5ed3931-9e16-45dc-ae2d-7502eee8ca10","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5ed3931-9e16-45dc-ae2d-7502eee8ca10","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5ed3931-9e16-45dc-ae2d-7502eee8ca10","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5ed3931-9e16-45dc-ae2d-7502eee8ca10","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5ed3931-9e16-45dc-ae2d-7502eee8ca10","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5ed3931-9e16-45dc-ae2d-7502eee8ca10","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69cacfbc-0de6-4c22-80b9-f98a0d94991c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23598","PortSpecifier":{"PortValue":23598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69cacfbc-0de6-4c22-80b9-f98a0d94991c","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69cacfbc-0de6-4c22-80b9-f98a0d94991c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23598","PortSpecifier":{"PortValue":23598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999740,"nanos":847263397},"http":{"id":"69cacfbc-0de6-4c22-80b9-f98a0d94991c","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"69cacfbc-0de6-4c22-80b9-f98a0d94991c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69cacfbc-0de6-4c22-80b9-f98a0d94991c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69cacfbc-0de6-4c22-80b9-f98a0d94991c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69cacfbc-0de6-4c22-80b9-f98a0d94991c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69cacfbc-0de6-4c22-80b9-f98a0d94991c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69cacfbc-0de6-4c22-80b9-f98a0d94991c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69cacfbc-0de6-4c22-80b9-f98a0d94991c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69cacfbc-0de6-4c22-80b9-f98a0d94991c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e71c626-67bd-4c68-9558-7cc02f6a825f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53232","PortSpecifier":{"PortValue":53232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e71c626-67bd-4c68-9558-7cc02f6a825f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e71c626-67bd-4c68-9558-7cc02f6a825f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53232","PortSpecifier":{"PortValue":53232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999740,"nanos":884451501},"http":{"id":"8e71c626-67bd-4c68-9558-7cc02f6a825f","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"8e71c626-67bd-4c68-9558-7cc02f6a825f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8e71c626-67bd-4c68-9558-7cc02f6a825f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e71c626-67bd-4c68-9558-7cc02f6a825f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e71c626-67bd-4c68-9558-7cc02f6a825f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e71c626-67bd-4c68-9558-7cc02f6a825f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e71c626-67bd-4c68-9558-7cc02f6a825f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e71c626-67bd-4c68-9558-7cc02f6a825f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e71c626-67bd-4c68-9558-7cc02f6a825f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff732801-8933-4cd6-a450-e4df8156d22d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20534","PortSpecifier":{"PortValue":20534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff732801-8933-4cd6-a450-e4df8156d22d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff732801-8933-4cd6-a450-e4df8156d22d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20534","PortSpecifier":{"PortValue":20534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999740,"nanos":922234416},"http":{"id":"ff732801-8933-4cd6-a450-e4df8156d22d","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"ff732801-8933-4cd6-a450-e4df8156d22d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ff732801-8933-4cd6-a450-e4df8156d22d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff732801-8933-4cd6-a450-e4df8156d22d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff732801-8933-4cd6-a450-e4df8156d22d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff732801-8933-4cd6-a450-e4df8156d22d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff732801-8933-4cd6-a450-e4df8156d22d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff732801-8933-4cd6-a450-e4df8156d22d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff732801-8933-4cd6-a450-e4df8156d22d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:09:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31a89f15-d151-49c2-9c63-86f1d3c1de88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:7646","PortSpecifier":{"PortValue":7646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31a89f15-d151-49c2-9c63-86f1d3c1de88","method":"GET","path":"/maas-api/v1/api-keys/781dac95-3833-46d7-92f2-2edf8a4a4d3c","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31a89f15-d151-49c2-9c63-86f1d3c1de88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:7646","PortSpecifier":{"PortValue":7646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999741,"nanos":408193017},"http":{"id":"31a89f15-d151-49c2-9c63-86f1d3c1de88","method":"GET","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/781dac95-3833-46d7-92f2-2edf8a4a4d3c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"31a89f15-d151-49c2-9c63-86f1d3c1de88","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:09:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"31a89f15-d151-49c2-9c63-86f1d3c1de88","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:09:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31a89f15-d151-49c2-9c63-86f1d3c1de88","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:09:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31a89f15-d151-49c2-9c63-86f1d3c1de88","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/781dac95-3833-46d7-92f2-2edf8a4a4d3c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31a89f15-d151-49c2-9c63-86f1d3c1de88","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:09:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31a89f15-d151-49c2-9c63-86f1d3c1de88","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:09:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31a89f15-d151-49c2-9c63-86f1d3c1de88","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31a89f15-d151-49c2-9c63-86f1d3c1de88","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:09:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9e3b2c5-8cc0-4376-9915-56ec809b4e96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23606","PortSpecifier":{"PortValue":23606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9e3b2c5-8cc0-4376-9915-56ec809b4e96","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9e3b2c5-8cc0-4376-9915-56ec809b4e96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23606","PortSpecifier":{"PortValue":23606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999742,"nanos":180552991},"http":{"id":"e9e3b2c5-8cc0-4376-9915-56ec809b4e96","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"e9e3b2c5-8cc0-4376-9915-56ec809b4e96","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:09:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e9e3b2c5-8cc0-4376-9915-56ec809b4e96","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:09:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9e3b2c5-8cc0-4376-9915-56ec809b4e96","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-apikey-active-sa","uid":"867d71d5-96ad-4a33-8a40-d3fe3c9f9b3f","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6769227d-d045-45a7-b7d9-60f1acdd6f3a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9e3b2c5-8cc0-4376-9915-56ec809b4e96","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6769227d-d045-45a7-b7d9-60f1acdd6f3a"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"867d71d5-96ad-4a33-8a40-d3fe3c9f9b3f","username":"system:serviceaccount:llm:e2e-apikey-active-sa"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9e3b2c5-8cc0-4376-9915-56ec809b4e96","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-apikey-active-sa"}
{"level":"debug","ts":"2026-06-09T10:09:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9e3b2c5-8cc0-4376-9915-56ec809b4e96","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:09:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9e3b2c5-8cc0-4376-9915-56ec809b4e96","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9e3b2c5-8cc0-4376-9915-56ec809b4e96","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T10:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T10:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8acba05b-213d-4fd3-b4a7-9d93cf8faa0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:56002","PortSpecifier":{"PortValue":56002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8acba05b-213d-4fd3-b4a7-9d93cf8faa0f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8acba05b-213d-4fd3-b4a7-9d93cf8faa0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:56002","PortSpecifier":{"PortValue":56002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999761,"nanos":365019578},"http":{"id":"8acba05b-213d-4fd3-b4a7-9d93cf8faa0f","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"8acba05b-213d-4fd3-b4a7-9d93cf8faa0f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:09:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8acba05b-213d-4fd3-b4a7-9d93cf8faa0f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:09:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8acba05b-213d-4fd3-b4a7-9d93cf8faa0f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-apikey-degraded-sa","uid":"1226c793-ea29-459e-a790-8104ffd18850","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be10a1ed-0827-4cfc-8e8e-1749789a1f7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:09:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8acba05b-213d-4fd3-b4a7-9d93cf8faa0f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be10a1ed-0827-4cfc-8e8e-1749789a1f7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"1226c793-ea29-459e-a790-8104ffd18850","username":"system:serviceaccount:llm:e2e-apikey-degraded-sa"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8acba05b-213d-4fd3-b4a7-9d93cf8faa0f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-apikey-degraded-sa"}
{"level":"debug","ts":"2026-06-09T10:09:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8acba05b-213d-4fd3-b4a7-9d93cf8faa0f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:09:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8acba05b-213d-4fd3-b4a7-9d93cf8faa0f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8acba05b-213d-4fd3-b4a7-9d93cf8faa0f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:09:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d06e682-aba8-47bc-8e57-dfe9572b17ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:27194","PortSpecifier":{"PortValue":27194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d06e682-aba8-47bc-8e57-dfe9572b17ec","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:09:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d06e682-aba8-47bc-8e57-dfe9572b17ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:27194","PortSpecifier":{"PortValue":27194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999780,"nanos":721021901},"http":{"id":"4d06e682-aba8-47bc-8e57-dfe9572b17ec","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"4d06e682-aba8-47bc-8e57-dfe9572b17ec","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:09:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4d06e682-aba8-47bc-8e57-dfe9572b17ec","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:09:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d06e682-aba8-47bc-8e57-dfe9572b17ec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-apikey-failed-sa","uid":"448ca4a4-48d3-428a-b427-b91d73860c4e","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=114f1bdc-c4e6-4453-99fa-dd74df7a9907"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:09:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d06e682-aba8-47bc-8e57-dfe9572b17ec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=114f1bdc-c4e6-4453-99fa-dd74df7a9907"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"448ca4a4-48d3-428a-b427-b91d73860c4e","username":"system:serviceaccount:llm:e2e-apikey-failed-sa"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:09:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d06e682-aba8-47bc-8e57-dfe9572b17ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-apikey-failed-sa"}
{"level":"debug","ts":"2026-06-09T10:09:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d06e682-aba8-47bc-8e57-dfe9572b17ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:09:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d06e682-aba8-47bc-8e57-dfe9572b17ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d06e682-aba8-47bc-8e57-dfe9572b17ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:09:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:09:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:09:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:09:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:09:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:10:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3602a786-c243-4324-bec2-1459f8409151","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:23144","PortSpecifier":{"PortValue":23144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3602a786-c243-4324-bec2-1459f8409151","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:10:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3602a786-c243-4324-bec2-1459f8409151","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:23144","PortSpecifier":{"PortValue":23144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999800,"nanos":68731557},"http":{"id":"3602a786-c243-4324-bec2-1459f8409151","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:10:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"3602a786-c243-4324-bec2-1459f8409151","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:10:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3602a786-c243-4324-bec2-1459f8409151","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:10:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3602a786-c243-4324-bec2-1459f8409151","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-apikey-pending-sa","uid":"303b3c59-39d9-43da-944e-e516a0409d45","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9a97016c-0feb-46a3-a95c-cc2a28926843"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:10:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3602a786-c243-4324-bec2-1459f8409151","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9a97016c-0feb-46a3-a95c-cc2a28926843"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"303b3c59-39d9-43da-944e-e516a0409d45","username":"system:serviceaccount:llm:e2e-apikey-pending-sa"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:10:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3602a786-c243-4324-bec2-1459f8409151","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-apikey-pending-sa"}
{"level":"debug","ts":"2026-06-09T10:10:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3602a786-c243-4324-bec2-1459f8409151","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:10:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3602a786-c243-4324-bec2-1459f8409151","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:10:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3602a786-c243-4324-bec2-1459f8409151","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:10:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:10:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:10:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:10:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:10:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:10:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:10:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:10:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:10:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:10:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:10:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:10:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:10:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aff91a94-f853-43be-87f6-a088efe2a092","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:33452","PortSpecifier":{"PortValue":33452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aff91a94-f853-43be-87f6-a088efe2a092","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:10:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aff91a94-f853-43be-87f6-a088efe2a092","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:33452","PortSpecifier":{"PortValue":33452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999810,"nanos":810945352},"http":{"id":"aff91a94-f853-43be-87f6-a088efe2a092","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:10:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"aff91a94-f853-43be-87f6-a088efe2a092","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:10:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aff91a94-f853-43be-87f6-a088efe2a092","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:10:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aff91a94-f853-43be-87f6-a088efe2a092","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-apikey-unreconciled-sa","uid":"609e55da-217d-4ea8-ad60-eb57b25cd99b","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f55634c4-e5ce-4c56-9a6d-ab5977fa8910"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aff91a94-f853-43be-87f6-a088efe2a092","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f55634c4-e5ce-4c56-9a6d-ab5977fa8910"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"609e55da-217d-4ea8-ad60-eb57b25cd99b","username":"system:serviceaccount:llm:e2e-apikey-unreconciled-sa"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aff91a94-f853-43be-87f6-a088efe2a092","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-apikey-unreconciled-sa"}
{"level":"debug","ts":"2026-06-09T10:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aff91a94-f853-43be-87f6-a088efe2a092","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:10:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aff91a94-f853-43be-87f6-a088efe2a092","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:10:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aff91a94-f853-43be-87f6-a088efe2a092","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:10:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eaab1ace-0159-4c92-9581-2e2c9bd9ef3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:2894","PortSpecifier":{"PortValue":2894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eaab1ace-0159-4c92-9581-2e2c9bd9ef3d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:10:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eaab1ace-0159-4c92-9581-2e2c9bd9ef3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:2894","PortSpecifier":{"PortValue":2894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999832,"nanos":925443594},"http":{"id":"eaab1ace-0159-4c92-9581-2e2c9bd9ef3d","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:10:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"eaab1ace-0159-4c92-9581-2e2c9bd9ef3d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:10:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eaab1ace-0159-4c92-9581-2e2c9bd9ef3d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:10:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eaab1ace-0159-4c92-9581-2e2c9bd9ef3d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-filter-sa-042efe57","uid":"35494098-b574-4089-8a61-2f6bdd78f680","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f845d585-ee01-4a58-bf2b-5e81ee0db475"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:10:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eaab1ace-0159-4c92-9581-2e2c9bd9ef3d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f845d585-ee01-4a58-bf2b-5e81ee0db475"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"35494098-b574-4089-8a61-2f6bdd78f680","username":"system:serviceaccount:llm:e2e-filter-sa-042efe57"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:10:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eaab1ace-0159-4c92-9581-2e2c9bd9ef3d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-filter-sa-042efe57"}
{"level":"debug","ts":"2026-06-09T10:10:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eaab1ace-0159-4c92-9581-2e2c9bd9ef3d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:10:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eaab1ace-0159-4c92-9581-2e2c9bd9ef3d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:10:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eaab1ace-0159-4c92-9581-2e2c9bd9ef3d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:10:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:10:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:10:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:10:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T10:10:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T10:10:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T10:10:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T10:10:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T10:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T10:10:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af0d9268-ccdd-47f6-a7f6-3e9eb9d37c75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:30948","PortSpecifier":{"PortValue":30948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af0d9268-ccdd-47f6-a7f6-3e9eb9d37c75","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:10:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af0d9268-ccdd-47f6-a7f6-3e9eb9d37c75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:30948","PortSpecifier":{"PortValue":30948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999842,"nanos":93165275},"http":{"id":"af0d9268-ccdd-47f6-a7f6-3e9eb9d37c75","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:10:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"af0d9268-ccdd-47f6-a7f6-3e9eb9d37c75","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:10:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"af0d9268-ccdd-47f6-a7f6-3e9eb9d37c75","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:10:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af0d9268-ccdd-47f6-a7f6-3e9eb9d37c75","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:10:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af0d9268-ccdd-47f6-a7f6-3e9eb9d37c75","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:10:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af0d9268-ccdd-47f6-a7f6-3e9eb9d37c75","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:10:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af0d9268-ccdd-47f6-a7f6-3e9eb9d37c75","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:10:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af0d9268-ccdd-47f6-a7f6-3e9eb9d37c75","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:10:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af0d9268-ccdd-47f6-a7f6-3e9eb9d37c75","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T10:10:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3300345f-75ed-49ea-ae42-b9292a6a37db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23708","PortSpecifier":{"PortValue":23708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3300345f-75ed-49ea-ae42-b9292a6a37db","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T10:10:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3300345f-75ed-49ea-ae42-b9292a6a37db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23708","PortSpecifier":{"PortValue":23708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780999842,"nanos":145657101},"http":{"id":"3300345f-75ed-49ea-ae42-b9292a6a37db","method":"POST","headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:10:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"3300345f-75ed-49ea-ae42-b9292a6a37db","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T10:10:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3300345f-75ed-49ea-ae42-b9292a6a37db","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T10:10:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3300345f-75ed-49ea-ae42-b9292a6a37db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"]}}
{"level":"debug","ts":"2026-06-09T10:10:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3300345f-75ed-49ea-ae42-b9292a6a37db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f41cdc0437ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d61d8f6d-f907-4e91-9a74-3dcc4f7f9a50"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee08b86c-58d6-4c21-aec7-433e1660f215","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64907ff2-128a-4188-ac6f-f41cdc0437ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T10:10:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3300345f-75ed-49ea-ae42-b9292a6a37db","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T10:10:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3300345f-75ed-49ea-ae42-b9292a6a37db","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T10:10:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3300345f-75ed-49ea-ae42-b9292a6a37db","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T10:10:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3300345f-75ed-49ea-ae42-b9292a6a37db","authorized":true,"response":"OK"}