--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"} {"level":"info","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"} {"level":"info","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"} {"level":"info","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"} {"level":"error","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"} {"level":"info","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"} {"level":"debug","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"} {"level":"debug","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"} {"level":"info","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"} {"level":"info","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"} {"level":"info","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"} {"level":"debug","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e768241b-d8db-421d-a0bf-a3dc89ba9bf6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:47004","PortSpecifier":{"PortValue":47004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e768241b-d8db-421d-a0bf-a3dc89ba9bf6","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e768241b-d8db-421d-a0bf-a3dc89ba9bf6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:47004","PortSpecifier":{"PortValue":47004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964081,"nanos":44726015},"http":{"id":"e768241b-d8db-421d-a0bf-a3dc89ba9bf6","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"e768241b-d8db-421d-a0bf-a3dc89ba9bf6","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e768241b-d8db-421d-a0bf-a3dc89ba9bf6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e768241b-d8db-421d-a0bf-a3dc89ba9bf6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"64642782-2120-41d9-91d7-6de648fc531e","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e4c728ce-b50e-4946-ae77-6ac1352f934a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e768241b-d8db-421d-a0bf-a3dc89ba9bf6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e4c728ce-b50e-4946-ae77-6ac1352f934a"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"64642782-2120-41d9-91d7-6de648fc531e","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","authorization":"Bearer **** ****REDACTED_JWT****","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03YmY4NDU4NzU2LTdzeHpwCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-7bf8458756-7sxzp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-request-id":"e768241b-d8db-421d-a0bf-a3dc89ba9bf6"},"host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","id":"e768241b-d8db-421d-a0bf-a3dc89ba9bf6","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/2","scheme":"https","time":{"nanos":44726015,"seconds":1780964081},"url_path":"/maas-api/v1/api-keys","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.2:47004","port":47004}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e768241b-d8db-421d-a0bf-a3dc89ba9bf6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e768241b-d8db-421d-a0bf-a3dc89ba9bf6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e768241b-d8db-421d-a0bf-a3dc89ba9bf6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e768241b-d8db-421d-a0bf-a3dc89ba9bf6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fab495ab-2ae8-468a-a6c2-fbc31e943a00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:57356","PortSpecifier":{"PortValue":57356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fab495ab-2ae8-468a-a6c2-fbc31e943a00","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fab495ab-2ae8-468a-a6c2-fbc31e943a00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:57356","PortSpecifier":{"PortValue":57356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964081,"nanos":191125285},"http":{"id":"fab495ab-2ae8-468a-a6c2-fbc31e943a00","method":"GET","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fab495ab-2ae8-468a-a6c2-fbc31e943a00","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fab495ab-2ae8-468a-a6c2-fbc31e943a00","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fab495ab-2ae8-468a-a6c2-fbc31e943a00","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fab495ab-2ae8-468a-a6c2-fbc31e943a00","input":{"auth":{"identity":"Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-7bf8458756-7sxzp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-request-id":"fab495ab-2ae8-468a-a6c2-fbc31e943a00"},"host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","id":"fab495ab-2ae8-468a-a6c2-fbc31e943a00","method":"GET","path":"/maas-api/v1/models","protocol":"HTTP/2","scheme":"https"},"time":{"nanos":191125285,"seconds":1780964081}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":57356},"address":"100.64.0.3:57356"}}}}},"destination":{"address":"10.132.0.39:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fab495ab-2ae8-468a-a6c2-fbc31e943a00","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fab495ab-2ae8-468a-a6c2-fbc31e943a00","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fab495ab-2ae8-468a-a6c2-fbc31e943a00","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fab495ab-2ae8-468a-a6c2-fbc31e943a00","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fab495ab-2ae8-468a-a6c2-fbc31e943a00","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3573a8f-0155-4b41-8341-090c4bf9f684","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:45056","PortSpecifier":{"PortValue":45056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3573a8f-0155-4b41-8341-090c4bf9f684","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3573a8f-0155-4b41-8341-090c4bf9f684","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:45056","PortSpecifier":{"PortValue":45056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964081,"nanos":220631143},"http":{"id":"e3573a8f-0155-4b41-8341-090c4bf9f684","method":"GET","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3573a8f-0155-4b41-8341-090c4bf9f684","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3573a8f-0155-4b41-8341-090c4bf9f684","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3573a8f-0155-4b41-8341-090c4bf9f684","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3573a8f-0155-4b41-8341-090c4bf9f684","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3573a8f-0155-4b41-8341-090c4bf9f684","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3573a8f-0155-4b41-8341-090c4bf9f684","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.28","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03YmY4NDU4NzU2LTdzeHpwCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-7bf8458756-7sxzp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.134.0.28","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"e3573a8f-0155-4b41-8341-090c4bf9f684"},"host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","id":"e3573a8f-0155-4b41-8341-090c4bf9f684","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":220631143,"seconds":1780964081},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.134.0.28:45056","port":45056}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3573a8f-0155-4b41-8341-090c4bf9f684","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3573a8f-0155-4b41-8341-090c4bf9f684","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3573a8f-0155-4b41-8341-090c4bf9f684","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3573a8f-0155-4b41-8341-090c4bf9f684","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3573a8f-0155-4b41-8341-090c4bf9f684","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3573a8f-0155-4b41-8341-090c4bf9f684","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"7dec8aec-1c43-47ad-8469-e1fbed916dc0","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3573a8f-0155-4b41-8341-090c4bf9f684","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3573a8f-0155-4b41-8341-090c4bf9f684","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa3e4f0f-4583-4a7c-977e-cc2283203b95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:52998","PortSpecifier":{"PortValue":52998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa3e4f0f-4583-4a7c-977e-cc2283203b95","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa3e4f0f-4583-4a7c-977e-cc2283203b95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:52998","PortSpecifier":{"PortValue":52998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964081,"nanos":314985006},"http":{"id":"fa3e4f0f-4583-4a7c-977e-cc2283203b95","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa3e4f0f-4583-4a7c-977e-cc2283203b95","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa3e4f0f-4583-4a7c-977e-cc2283203b95","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa3e4f0f-4583-4a7c-977e-cc2283203b95","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa3e4f0f-4583-4a7c-977e-cc2283203b95","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa3e4f0f-4583-4a7c-977e-cc2283203b95","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa3e4f0f-4583-4a7c-977e-cc2283203b95","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-7bf8458756-7sxzp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"fa3e4f0f-4583-4a7c-977e-cc2283203b95"},"host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","id":"fa3e4f0f-4583-4a7c-977e-cc2283203b95","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":314985006,"seconds":1780964081},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.3:52998","port":52998}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa3e4f0f-4583-4a7c-977e-cc2283203b95","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa3e4f0f-4583-4a7c-977e-cc2283203b95","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa3e4f0f-4583-4a7c-977e-cc2283203b95","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa3e4f0f-4583-4a7c-977e-cc2283203b95","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa3e4f0f-4583-4a7c-977e-cc2283203b95","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa3e4f0f-4583-4a7c-977e-cc2283203b95","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"7dec8aec-1c43-47ad-8469-e1fbed916dc0","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa3e4f0f-4583-4a7c-977e-cc2283203b95","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa3e4f0f-4583-4a7c-977e-cc2283203b95","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5598d85f-d022-492b-8c66-2f28927d7043","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:43086","PortSpecifier":{"PortValue":43086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5598d85f-d022-492b-8c66-2f28927d7043","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5598d85f-d022-492b-8c66-2f28927d7043","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:43086","PortSpecifier":{"PortValue":43086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964081,"nanos":388798574},"http":{"id":"5598d85f-d022-492b-8c66-2f28927d7043","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5598d85f-d022-492b-8c66-2f28927d7043","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5598d85f-d022-492b-8c66-2f28927d7043","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5598d85f-d022-492b-8c66-2f28927d7043","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5598d85f-d022-492b-8c66-2f28927d7043","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5598d85f-d022-492b-8c66-2f28927d7043","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5598d85f-d022-492b-8c66-2f28927d7043","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-7bf8458756-7sxzp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"5598d85f-d022-492b-8c66-2f28927d7043"},"host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","id":"5598d85f-d022-492b-8c66-2f28927d7043","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":388798574,"seconds":1780964081},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.4:43086","port":43086}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5598d85f-d022-492b-8c66-2f28927d7043","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5598d85f-d022-492b-8c66-2f28927d7043","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5598d85f-d022-492b-8c66-2f28927d7043","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5598d85f-d022-492b-8c66-2f28927d7043","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5598d85f-d022-492b-8c66-2f28927d7043","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5598d85f-d022-492b-8c66-2f28927d7043","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"7dec8aec-1c43-47ad-8469-e1fbed916dc0","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5598d85f-d022-492b-8c66-2f28927d7043","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5598d85f-d022-492b-8c66-2f28927d7043","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddbc1580-295f-4544-8f32-bcc372328f3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:11134","PortSpecifier":{"PortValue":11134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ddbc1580-295f-4544-8f32-bcc372328f3c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddbc1580-295f-4544-8f32-bcc372328f3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:11134","PortSpecifier":{"PortValue":11134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964081,"nanos":434593571},"http":{"id":"ddbc1580-295f-4544-8f32-bcc372328f3c","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ddbc1580-295f-4544-8f32-bcc372328f3c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ddbc1580-295f-4544-8f32-bcc372328f3c","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ddbc1580-295f-4544-8f32-bcc372328f3c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ddbc1580-295f-4544-8f32-bcc372328f3c","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ddbc1580-295f-4544-8f32-bcc372328f3c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ddbc1580-295f-4544-8f32-bcc372328f3c","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-7bf8458756-7sxzp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"ddbc1580-295f-4544-8f32-bcc372328f3c"},"host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","id":"ddbc1580-295f-4544-8f32-bcc372328f3c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":434593571,"seconds":1780964081},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.2:11134","port":11134}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddbc1580-295f-4544-8f32-bcc372328f3c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddbc1580-295f-4544-8f32-bcc372328f3c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddbc1580-295f-4544-8f32-bcc372328f3c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddbc1580-295f-4544-8f32-bcc372328f3c","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddbc1580-295f-4544-8f32-bcc372328f3c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddbc1580-295f-4544-8f32-bcc372328f3c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"7dec8aec-1c43-47ad-8469-e1fbed916dc0","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddbc1580-295f-4544-8f32-bcc372328f3c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddbc1580-295f-4544-8f32-bcc372328f3c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e89fb37-22fb-4382-9992-dab84b52c472","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:47018","PortSpecifier":{"PortValue":47018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e89fb37-22fb-4382-9992-dab84b52c472","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e89fb37-22fb-4382-9992-dab84b52c472","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:47018","PortSpecifier":{"PortValue":47018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964081,"nanos":470755440},"http":{"id":"9e89fb37-22fb-4382-9992-dab84b52c472","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e89fb37-22fb-4382-9992-dab84b52c472","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e89fb37-22fb-4382-9992-dab84b52c472","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e89fb37-22fb-4382-9992-dab84b52c472","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e89fb37-22fb-4382-9992-dab84b52c472","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e89fb37-22fb-4382-9992-dab84b52c472","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e89fb37-22fb-4382-9992-dab84b52c472","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-7bf8458756-7sxzp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"9e89fb37-22fb-4382-9992-dab84b52c472"},"host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","id":"9e89fb37-22fb-4382-9992-dab84b52c472","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":470755440,"seconds":1780964081},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.2:47018","port":47018}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e89fb37-22fb-4382-9992-dab84b52c472","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e89fb37-22fb-4382-9992-dab84b52c472","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e89fb37-22fb-4382-9992-dab84b52c472","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e89fb37-22fb-4382-9992-dab84b52c472","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e89fb37-22fb-4382-9992-dab84b52c472","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e89fb37-22fb-4382-9992-dab84b52c472","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"7dec8aec-1c43-47ad-8469-e1fbed916dc0","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e89fb37-22fb-4382-9992-dab84b52c472","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e89fb37-22fb-4382-9992-dab84b52c472","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b062973-e0d1-487d-99bc-da96d2595b59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:57358","PortSpecifier":{"PortValue":57358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b062973-e0d1-487d-99bc-da96d2595b59","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b062973-e0d1-487d-99bc-da96d2595b59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:57358","PortSpecifier":{"PortValue":57358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964081,"nanos":521784876},"http":{"id":"0b062973-e0d1-487d-99bc-da96d2595b59","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b062973-e0d1-487d-99bc-da96d2595b59","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0b062973-e0d1-487d-99bc-da96d2595b59","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0b062973-e0d1-487d-99bc-da96d2595b59","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0b062973-e0d1-487d-99bc-da96d2595b59","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0b062973-e0d1-487d-99bc-da96d2595b59","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b062973-e0d1-487d-99bc-da96d2595b59","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-7bf8458756-7sxzp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"0b062973-e0d1-487d-99bc-da96d2595b59"},"host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","id":"0b062973-e0d1-487d-99bc-da96d2595b59","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":521784876,"seconds":1780964081},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.3:57358","port":57358}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b062973-e0d1-487d-99bc-da96d2595b59","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b062973-e0d1-487d-99bc-da96d2595b59","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b062973-e0d1-487d-99bc-da96d2595b59","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b062973-e0d1-487d-99bc-da96d2595b59","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b062973-e0d1-487d-99bc-da96d2595b59","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b062973-e0d1-487d-99bc-da96d2595b59","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"7dec8aec-1c43-47ad-8469-e1fbed916dc0","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b062973-e0d1-487d-99bc-da96d2595b59","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b062973-e0d1-487d-99bc-da96d2595b59","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a15284b-3e4a-422c-94e9-52c6d08f0536","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52996","PortSpecifier":{"PortValue":52996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a15284b-3e4a-422c-94e9-52c6d08f0536","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a15284b-3e4a-422c-94e9-52c6d08f0536","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52996","PortSpecifier":{"PortValue":52996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964081,"nanos":566971105},"http":{"id":"9a15284b-3e4a-422c-94e9-52c6d08f0536","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a15284b-3e4a-422c-94e9-52c6d08f0536","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a15284b-3e4a-422c-94e9-52c6d08f0536","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a15284b-3e4a-422c-94e9-52c6d08f0536","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a15284b-3e4a-422c-94e9-52c6d08f0536","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a15284b-3e4a-422c-94e9-52c6d08f0536","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a15284b-3e4a-422c-94e9-52c6d08f0536","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-7bf8458756-7sxzp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"9a15284b-3e4a-422c-94e9-52c6d08f0536"},"host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","id":"9a15284b-3e4a-422c-94e9-52c6d08f0536","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":566971105,"seconds":1780964081},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.4:52996","port":52996}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a15284b-3e4a-422c-94e9-52c6d08f0536","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a15284b-3e4a-422c-94e9-52c6d08f0536","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a15284b-3e4a-422c-94e9-52c6d08f0536","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a15284b-3e4a-422c-94e9-52c6d08f0536","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a15284b-3e4a-422c-94e9-52c6d08f0536","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a15284b-3e4a-422c-94e9-52c6d08f0536","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"7dec8aec-1c43-47ad-8469-e1fbed916dc0","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a15284b-3e4a-422c-94e9-52c6d08f0536","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a15284b-3e4a-422c-94e9-52c6d08f0536","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7418174c-b934-4513-b9b5-92ccda860dbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:53008","PortSpecifier":{"PortValue":53008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7418174c-b934-4513-b9b5-92ccda860dbc","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7418174c-b934-4513-b9b5-92ccda860dbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:53008","PortSpecifier":{"PortValue":53008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964081,"nanos":604939725},"http":{"id":"7418174c-b934-4513-b9b5-92ccda860dbc","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7418174c-b934-4513-b9b5-92ccda860dbc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7418174c-b934-4513-b9b5-92ccda860dbc","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7418174c-b934-4513-b9b5-92ccda860dbc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7418174c-b934-4513-b9b5-92ccda860dbc","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7418174c-b934-4513-b9b5-92ccda860dbc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7418174c-b934-4513-b9b5-92ccda860dbc","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-7bf8458756-7sxzp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"7418174c-b934-4513-b9b5-92ccda860dbc"},"host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","id":"7418174c-b934-4513-b9b5-92ccda860dbc","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":604939725,"seconds":1780964081},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.3:53008","port":53008}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7418174c-b934-4513-b9b5-92ccda860dbc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7418174c-b934-4513-b9b5-92ccda860dbc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7418174c-b934-4513-b9b5-92ccda860dbc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7418174c-b934-4513-b9b5-92ccda860dbc","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7418174c-b934-4513-b9b5-92ccda860dbc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7418174c-b934-4513-b9b5-92ccda860dbc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"7dec8aec-1c43-47ad-8469-e1fbed916dc0","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7418174c-b934-4513-b9b5-92ccda860dbc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7418174c-b934-4513-b9b5-92ccda860dbc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3faeedb4-1885-4cbd-945a-7caf276eebdb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:11136","PortSpecifier":{"PortValue":11136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3faeedb4-1885-4cbd-945a-7caf276eebdb","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3faeedb4-1885-4cbd-945a-7caf276eebdb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:11136","PortSpecifier":{"PortValue":11136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964081,"nanos":639017465},"http":{"id":"3faeedb4-1885-4cbd-945a-7caf276eebdb","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3faeedb4-1885-4cbd-945a-7caf276eebdb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3faeedb4-1885-4cbd-945a-7caf276eebdb","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3faeedb4-1885-4cbd-945a-7caf276eebdb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3faeedb4-1885-4cbd-945a-7caf276eebdb","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3faeedb4-1885-4cbd-945a-7caf276eebdb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3faeedb4-1885-4cbd-945a-7caf276eebdb","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-7bf8458756-7sxzp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"3faeedb4-1885-4cbd-945a-7caf276eebdb"},"host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","id":"3faeedb4-1885-4cbd-945a-7caf276eebdb","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":639017465,"seconds":1780964081},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.2:11136","port":11136}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3faeedb4-1885-4cbd-945a-7caf276eebdb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3faeedb4-1885-4cbd-945a-7caf276eebdb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3faeedb4-1885-4cbd-945a-7caf276eebdb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3faeedb4-1885-4cbd-945a-7caf276eebdb","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3faeedb4-1885-4cbd-945a-7caf276eebdb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3faeedb4-1885-4cbd-945a-7caf276eebdb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"7dec8aec-1c43-47ad-8469-e1fbed916dc0","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3faeedb4-1885-4cbd-945a-7caf276eebdb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3faeedb4-1885-4cbd-945a-7caf276eebdb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5aff250f-c7fb-45ae-976b-1faf15f48767","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:43088","PortSpecifier":{"PortValue":43088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5aff250f-c7fb-45ae-976b-1faf15f48767","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5aff250f-c7fb-45ae-976b-1faf15f48767","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:43088","PortSpecifier":{"PortValue":43088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964081,"nanos":677586052},"http":{"id":"5aff250f-c7fb-45ae-976b-1faf15f48767","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5aff250f-c7fb-45ae-976b-1faf15f48767","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5aff250f-c7fb-45ae-976b-1faf15f48767","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5aff250f-c7fb-45ae-976b-1faf15f48767","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5aff250f-c7fb-45ae-976b-1faf15f48767","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5aff250f-c7fb-45ae-976b-1faf15f48767","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5aff250f-c7fb-45ae-976b-1faf15f48767","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-7bf8458756-7sxzp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"5aff250f-c7fb-45ae-976b-1faf15f48767"},"host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","id":"5aff250f-c7fb-45ae-976b-1faf15f48767","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":677586052,"seconds":1780964081},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.4:43088","port":43088}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aff250f-c7fb-45ae-976b-1faf15f48767","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aff250f-c7fb-45ae-976b-1faf15f48767","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aff250f-c7fb-45ae-976b-1faf15f48767","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5aff250f-c7fb-45ae-976b-1faf15f48767","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5aff250f-c7fb-45ae-976b-1faf15f48767","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5aff250f-c7fb-45ae-976b-1faf15f48767","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"7dec8aec-1c43-47ad-8469-e1fbed916dc0","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5aff250f-c7fb-45ae-976b-1faf15f48767","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5aff250f-c7fb-45ae-976b-1faf15f48767","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b90d464-9c39-983b-94b8-da7150cb8046","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:53006","PortSpecifier":{"PortValue":53006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b90d464-9c39-983b-94b8-da7150cb8046","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b90d464-9c39-983b-94b8-da7150cb8046","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:53006","PortSpecifier":{"PortValue":53006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964081,"nanos":712033787},"http":{"id":"9b90d464-9c39-983b-94b8-da7150cb8046","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b90d464-9c39-983b-94b8-da7150cb8046","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b90d464-9c39-983b-94b8-da7150cb8046","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b90d464-9c39-983b-94b8-da7150cb8046","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b90d464-9c39-983b-94b8-da7150cb8046","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b90d464-9c39-983b-94b8-da7150cb8046","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b90d464-9c39-983b-94b8-da7150cb8046","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03YmY4NDU4NzU2LTdzeHpwCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-7bf8458756-7sxzp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"9b90d464-9c39-983b-94b8-da7150cb8046"},"host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","id":"9b90d464-9c39-983b-94b8-da7150cb8046","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":712033787,"seconds":1780964081},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.4:53006","port":53006}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b90d464-9c39-983b-94b8-da7150cb8046","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b90d464-9c39-983b-94b8-da7150cb8046","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b90d464-9c39-983b-94b8-da7150cb8046","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b90d464-9c39-983b-94b8-da7150cb8046","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b90d464-9c39-983b-94b8-da7150cb8046","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b90d464-9c39-983b-94b8-da7150cb8046","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"7dec8aec-1c43-47ad-8469-e1fbed916dc0","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b90d464-9c39-983b-94b8-da7150cb8046","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b90d464-9c39-983b-94b8-da7150cb8046","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ae49e9a-9e5e-49cf-ae2a-b7cc0386f8af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:47024","PortSpecifier":{"PortValue":47024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ae49e9a-9e5e-49cf-ae2a-b7cc0386f8af","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ae49e9a-9e5e-49cf-ae2a-b7cc0386f8af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:47024","PortSpecifier":{"PortValue":47024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964081,"nanos":770603704},"http":{"id":"6ae49e9a-9e5e-49cf-ae2a-b7cc0386f8af","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ae49e9a-9e5e-49cf-ae2a-b7cc0386f8af","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ae49e9a-9e5e-49cf-ae2a-b7cc0386f8af","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ae49e9a-9e5e-49cf-ae2a-b7cc0386f8af","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ae49e9a-9e5e-49cf-ae2a-b7cc0386f8af","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ae49e9a-9e5e-49cf-ae2a-b7cc0386f8af","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ae49e9a-9e5e-49cf-ae2a-b7cc0386f8af","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-rnt8F4oxNYuJXaw8_416vdwvgGgOvC34tlN1uGjQgY2Pmz3o88TqanFlct9F","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-7bf8458756-7sxzp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"6ae49e9a-9e5e-49cf-ae2a-b7cc0386f8af"},"host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","id":"6ae49e9a-9e5e-49cf-ae2a-b7cc0386f8af","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":770603704,"seconds":1780964081},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.2:47024","port":47024}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ae49e9a-9e5e-49cf-ae2a-b7cc0386f8af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ae49e9a-9e5e-49cf-ae2a-b7cc0386f8af","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ae49e9a-9e5e-49cf-ae2a-b7cc0386f8af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ae49e9a-9e5e-49cf-ae2a-b7cc0386f8af","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ae49e9a-9e5e-49cf-ae2a-b7cc0386f8af","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ae49e9a-9e5e-49cf-ae2a-b7cc0386f8af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"7dec8aec-1c43-47ad-8469-e1fbed916dc0","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ae49e9a-9e5e-49cf-ae2a-b7cc0386f8af","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ae49e9a-9e5e-49cf-ae2a-b7cc0386f8af","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1048f53d-5d96-4612-a89d-4341d6d2fdc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:57360","PortSpecifier":{"PortValue":57360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1048f53d-5d96-4612-a89d-4341d6d2fdc4","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1048f53d-5d96-4612-a89d-4341d6d2fdc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:57360","PortSpecifier":{"PortValue":57360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964081,"nanos":805068771},"http":{"id":"1048f53d-5d96-4612-a89d-4341d6d2fdc4","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-7bf8458756-7sxzp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"1048f53d-5d96-4612-a89d-4341d6d2fdc4"},"path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/2"}},"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"metadata_context":{}}} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1048f53d-5d96-4612-a89d-4341d6d2fdc4","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1048f53d-5d96-4612-a89d-4341d6d2fdc4","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc97546f-61ab-4ace-b98c-4f96ef545356","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:53010","PortSpecifier":{"PortValue":53010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc97546f-61ab-4ace-b98c-4f96ef545356","method":"DELETE","path":"/maas-api/v1/api-keys/7dec8aec-1c43-47ad-8469-e1fbed916dc0","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc97546f-61ab-4ace-b98c-4f96ef545356","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:53010","PortSpecifier":{"PortValue":53010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964081,"nanos":853606434},"http":{"id":"cc97546f-61ab-4ace-b98c-4f96ef545356","method":"DELETE","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/7dec8aec-1c43-47ad-8469-e1fbed916dc0",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"cc97546f-61ab-4ace-b98c-4f96ef545356","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc97546f-61ab-4ace-b98c-4f96ef545356","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc97546f-61ab-4ace-b98c-4f96ef545356","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"64642782-2120-41d9-91d7-6de648fc531e","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e4c728ce-b50e-4946-ae77-6ac1352f934a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc97546f-61ab-4ace-b98c-4f96ef545356","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e4c728ce-b50e-4946-ae77-6ac1352f934a"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"64642782-2120-41d9-91d7-6de648fc531e","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/7dec8aec-1c43-47ad-8469-e1fbed916dc0",":scheme":"https","accept":"*/*","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-7bf8458756-7sxzp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-request-id":"cc97546f-61ab-4ace-b98c-4f96ef545356"},"host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","id":"cc97546f-61ab-4ace-b98c-4f96ef545356","method":"DELETE","path":"/maas-api/v1/api-keys/7dec8aec-1c43-47ad-8469-e1fbed916dc0","protocol":"HTTP/2","scheme":"https","time":{"nanos":853606434,"seconds":1780964081},"url_path":"/maas-api/v1/api-keys/7dec8aec-1c43-47ad-8469-e1fbed916dc0","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.3:53010","port":53010}}} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc97546f-61ab-4ace-b98c-4f96ef545356","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc97546f-61ab-4ace-b98c-4f96ef545356","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc97546f-61ab-4ace-b98c-4f96ef545356","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc97546f-61ab-4ace-b98c-4f96ef545356","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8c6df5e-6e75-4a09-9f75-256da5743b15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:43092","PortSpecifier":{"PortValue":43092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e8c6df5e-6e75-4a09-9f75-256da5743b15","method":"GET","path":"/maas-api/v1/subscriptions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8c6df5e-6e75-4a09-9f75-256da5743b15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:43092","PortSpecifier":{"PortValue":43092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964089,"nanos":39110920},"http":{"id":"e8c6df5e-6e75-4a09-9f75-256da5743b15","method":"GET","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"e8c6df5e-6e75-4a09-9f75-256da5743b15","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e8c6df5e-6e75-4a09-9f75-256da5743b15","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e8c6df5e-6e75-4a09-9f75-256da5743b15","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e8c6df5e-6e75-4a09-9f75-256da5743b15","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03YmY4NDU4NzU2LTdzeHpwCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-7bf8458756-7sxzp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-request-id":"e8c6df5e-6e75-4a09-9f75-256da5743b15"},"host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","id":"e8c6df5e-6e75-4a09-9f75-256da5743b15","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/2","scheme":"https","time":{"nanos":39110920,"seconds":1780964089},"url_path":"/maas-api/v1/subscriptions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.4:43092","port":43092}}} {"level":"debug","ts":"2026-06-09T00:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8c6df5e-6e75-4a09-9f75-256da5743b15","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8c6df5e-6e75-4a09-9f75-256da5743b15","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8c6df5e-6e75-4a09-9f75-256da5743b15","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8c6df5e-6e75-4a09-9f75-256da5743b15","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19410983-9099-4f77-b9fa-5e8398ca8879","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:47028","PortSpecifier":{"PortValue":47028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19410983-9099-4f77-b9fa-5e8398ca8879","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19410983-9099-4f77-b9fa-5e8398ca8879","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:47028","PortSpecifier":{"PortValue":47028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964089,"nanos":525028964},"http":{"id":"19410983-9099-4f77-b9fa-5e8398ca8879","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19410983-9099-4f77-b9fa-5e8398ca8879","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780964389,"groups":["Engineering","Project-Alpha"],"iat":1780964089,"iss":"https://keycloak.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:bd3aa8f9-b9f6-1df6-8435-0665f3c150b1","preferred_username":"alice_lead","scope":"openid profile email","sid":"mzUOBnBbxPKYIvHILII0SSGx","sub":"75c2bba8-78f9-4f1b-81a1-78c893a16565","typ":"Bearer"}} {"level":"debug","ts":"2026-06-09T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19410983-9099-4f77-b9fa-5e8398ca8879","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780964389,"groups":["Engineering","Project-Alpha"],"iat":1780964089,"iss":"https://keycloak.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:bd3aa8f9-b9f6-1df6-8435-0665f3c150b1","preferred_username":"alice_lead","scope":"openid profile email","sid":"mzUOBnBbxPKYIvHILII0SSGx","sub":"75c2bba8-78f9-4f1b-81a1-78c893a16565","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","authorization":"Bearer **** ****REDACTED_JWT****","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-7bf8458756-7sxzp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-request-id":"19410983-9099-4f77-b9fa-5e8398ca8879"},"host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","id":"19410983-9099-4f77-b9fa-5e8398ca8879","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/2","scheme":"https","time":{"nanos":525028964,"seconds":1780964089},"url_path":"/maas-api/v1/api-keys","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.2:47028","port":47028}}} {"level":"debug","ts":"2026-06-09T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19410983-9099-4f77-b9fa-5e8398ca8879","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-06-09T00:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19410983-9099-4f77-b9fa-5e8398ca8879","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-06-09T00:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19410983-9099-4f77-b9fa-5e8398ca8879","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"info","ts":"2026-06-09T00:14:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19410983-9099-4f77-b9fa-5e8398ca8879","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19410983-9099-4f77-b9fa-5e8398ca8879","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13d889da-ae0e-4fae-8ef0-b3a32259b894","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:53018","PortSpecifier":{"PortValue":53018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13d889da-ae0e-4fae-8ef0-b3a32259b894","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13d889da-ae0e-4fae-8ef0-b3a32259b894","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:53018","PortSpecifier":{"PortValue":53018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":198456037},"http":{"id":"13d889da-ae0e-4fae-8ef0-b3a32259b894","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"13d889da-ae0e-4fae-8ef0-b3a32259b894","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"13d889da-ae0e-4fae-8ef0-b3a32259b894","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13d889da-ae0e-4fae-8ef0-b3a32259b894","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13d889da-ae0e-4fae-8ef0-b3a32259b894","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13d889da-ae0e-4fae-8ef0-b3a32259b894","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13d889da-ae0e-4fae-8ef0-b3a32259b894","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13d889da-ae0e-4fae-8ef0-b3a32259b894","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13d889da-ae0e-4fae-8ef0-b3a32259b894","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e6cecbf-aaa3-4a02-bd9f-58410d05422f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:53026","PortSpecifier":{"PortValue":53026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e6cecbf-aaa3-4a02-bd9f-58410d05422f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e6cecbf-aaa3-4a02-bd9f-58410d05422f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:53026","PortSpecifier":{"PortValue":53026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":237695659},"http":{"id":"6e6cecbf-aaa3-4a02-bd9f-58410d05422f","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"6e6cecbf-aaa3-4a02-bd9f-58410d05422f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6e6cecbf-aaa3-4a02-bd9f-58410d05422f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e6cecbf-aaa3-4a02-bd9f-58410d05422f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e6cecbf-aaa3-4a02-bd9f-58410d05422f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e6cecbf-aaa3-4a02-bd9f-58410d05422f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e6cecbf-aaa3-4a02-bd9f-58410d05422f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e6cecbf-aaa3-4a02-bd9f-58410d05422f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e6cecbf-aaa3-4a02-bd9f-58410d05422f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bec13a41-17e4-4a8a-bb28-1fb5609eba9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:11152","PortSpecifier":{"PortValue":11152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bec13a41-17e4-4a8a-bb28-1fb5609eba9a","method":"GET","path":"/maas-api/v1/api-keys/07effeb7-0547-4a40-95d0-75b518e730a8","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bec13a41-17e4-4a8a-bb28-1fb5609eba9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:11152","PortSpecifier":{"PortValue":11152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":271579883},"http":{"id":"bec13a41-17e4-4a8a-bb28-1fb5609eba9a","method":"GET","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/07effeb7-0547-4a40-95d0-75b518e730a8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"bec13a41-17e4-4a8a-bb28-1fb5609eba9a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bec13a41-17e4-4a8a-bb28-1fb5609eba9a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bec13a41-17e4-4a8a-bb28-1fb5609eba9a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bec13a41-17e4-4a8a-bb28-1fb5609eba9a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/07effeb7-0547-4a40-95d0-75b518e730a8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bec13a41-17e4-4a8a-bb28-1fb5609eba9a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bec13a41-17e4-4a8a-bb28-1fb5609eba9a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bec13a41-17e4-4a8a-bb28-1fb5609eba9a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bec13a41-17e4-4a8a-bb28-1fb5609eba9a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd636050-d0d6-4183-880c-e034cf3e9607","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14524","PortSpecifier":{"PortValue":14524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd636050-d0d6-4183-880c-e034cf3e9607","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd636050-d0d6-4183-880c-e034cf3e9607","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14524","PortSpecifier":{"PortValue":14524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":313295368},"http":{"id":"cd636050-d0d6-4183-880c-e034cf3e9607","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"cd636050-d0d6-4183-880c-e034cf3e9607","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd636050-d0d6-4183-880c-e034cf3e9607","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd636050-d0d6-4183-880c-e034cf3e9607","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd636050-d0d6-4183-880c-e034cf3e9607","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd636050-d0d6-4183-880c-e034cf3e9607","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd636050-d0d6-4183-880c-e034cf3e9607","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd636050-d0d6-4183-880c-e034cf3e9607","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd636050-d0d6-4183-880c-e034cf3e9607","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83de6bdd-767a-401e-9a73-26302c84d83a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36768","PortSpecifier":{"PortValue":36768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83de6bdd-767a-401e-9a73-26302c84d83a","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83de6bdd-767a-401e-9a73-26302c84d83a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36768","PortSpecifier":{"PortValue":36768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":347827065},"http":{"id":"83de6bdd-767a-401e-9a73-26302c84d83a","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"83de6bdd-767a-401e-9a73-26302c84d83a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"83de6bdd-767a-401e-9a73-26302c84d83a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83de6bdd-767a-401e-9a73-26302c84d83a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83de6bdd-767a-401e-9a73-26302c84d83a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83de6bdd-767a-401e-9a73-26302c84d83a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83de6bdd-767a-401e-9a73-26302c84d83a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83de6bdd-767a-401e-9a73-26302c84d83a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83de6bdd-767a-401e-9a73-26302c84d83a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c70d932-5fc2-4bc6-871d-0d7016a80968","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20040","PortSpecifier":{"PortValue":20040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c70d932-5fc2-4bc6-871d-0d7016a80968","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c70d932-5fc2-4bc6-871d-0d7016a80968","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20040","PortSpecifier":{"PortValue":20040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":381883340},"http":{"id":"2c70d932-5fc2-4bc6-871d-0d7016a80968","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"2c70d932-5fc2-4bc6-871d-0d7016a80968","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c70d932-5fc2-4bc6-871d-0d7016a80968","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c70d932-5fc2-4bc6-871d-0d7016a80968","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c70d932-5fc2-4bc6-871d-0d7016a80968","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c70d932-5fc2-4bc6-871d-0d7016a80968","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c70d932-5fc2-4bc6-871d-0d7016a80968","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c70d932-5fc2-4bc6-871d-0d7016a80968","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c70d932-5fc2-4bc6-871d-0d7016a80968","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94b178f5-1e0b-4517-adbc-31207df550e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42210","PortSpecifier":{"PortValue":42210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94b178f5-1e0b-4517-adbc-31207df550e5","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94b178f5-1e0b-4517-adbc-31207df550e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42210","PortSpecifier":{"PortValue":42210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":422637724},"http":{"id":"94b178f5-1e0b-4517-adbc-31207df550e5","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"94b178f5-1e0b-4517-adbc-31207df550e5","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"94b178f5-1e0b-4517-adbc-31207df550e5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94b178f5-1e0b-4517-adbc-31207df550e5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94b178f5-1e0b-4517-adbc-31207df550e5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94b178f5-1e0b-4517-adbc-31207df550e5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94b178f5-1e0b-4517-adbc-31207df550e5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94b178f5-1e0b-4517-adbc-31207df550e5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94b178f5-1e0b-4517-adbc-31207df550e5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fab3ee94-201b-4953-9a3e-5c557e78d2c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32084","PortSpecifier":{"PortValue":32084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fab3ee94-201b-4953-9a3e-5c557e78d2c7","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fab3ee94-201b-4953-9a3e-5c557e78d2c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32084","PortSpecifier":{"PortValue":32084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":460172719},"http":{"id":"fab3ee94-201b-4953-9a3e-5c557e78d2c7","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"fab3ee94-201b-4953-9a3e-5c557e78d2c7","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fab3ee94-201b-4953-9a3e-5c557e78d2c7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fab3ee94-201b-4953-9a3e-5c557e78d2c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fab3ee94-201b-4953-9a3e-5c557e78d2c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fab3ee94-201b-4953-9a3e-5c557e78d2c7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fab3ee94-201b-4953-9a3e-5c557e78d2c7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fab3ee94-201b-4953-9a3e-5c557e78d2c7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fab3ee94-201b-4953-9a3e-5c557e78d2c7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b06e9e69-3514-492a-9eb1-a965d137b1ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46152","PortSpecifier":{"PortValue":46152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b06e9e69-3514-492a-9eb1-a965d137b1ed","method":"DELETE","path":"/maas-api/v1/api-keys/99e0eceb-d614-453f-be60-efc006fa484a","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b06e9e69-3514-492a-9eb1-a965d137b1ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46152","PortSpecifier":{"PortValue":46152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":504574706},"http":{"id":"b06e9e69-3514-492a-9eb1-a965d137b1ed","method":"DELETE","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/99e0eceb-d614-453f-be60-efc006fa484a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"b06e9e69-3514-492a-9eb1-a965d137b1ed","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b06e9e69-3514-492a-9eb1-a965d137b1ed","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b06e9e69-3514-492a-9eb1-a965d137b1ed","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b06e9e69-3514-492a-9eb1-a965d137b1ed","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/99e0eceb-d614-453f-be60-efc006fa484a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b06e9e69-3514-492a-9eb1-a965d137b1ed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b06e9e69-3514-492a-9eb1-a965d137b1ed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b06e9e69-3514-492a-9eb1-a965d137b1ed","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b06e9e69-3514-492a-9eb1-a965d137b1ed","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"934198bc-47fc-4fc3-8a87-49d37661df1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36778","PortSpecifier":{"PortValue":36778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"934198bc-47fc-4fc3-8a87-49d37661df1b","method":"GET","path":"/maas-api/v1/api-keys/99e0eceb-d614-453f-be60-efc006fa484a","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"934198bc-47fc-4fc3-8a87-49d37661df1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36778","PortSpecifier":{"PortValue":36778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":546474051},"http":{"id":"934198bc-47fc-4fc3-8a87-49d37661df1b","method":"GET","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/99e0eceb-d614-453f-be60-efc006fa484a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"934198bc-47fc-4fc3-8a87-49d37661df1b","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"934198bc-47fc-4fc3-8a87-49d37661df1b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"934198bc-47fc-4fc3-8a87-49d37661df1b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"934198bc-47fc-4fc3-8a87-49d37661df1b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/99e0eceb-d614-453f-be60-efc006fa484a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"934198bc-47fc-4fc3-8a87-49d37661df1b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"934198bc-47fc-4fc3-8a87-49d37661df1b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"934198bc-47fc-4fc3-8a87-49d37661df1b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"934198bc-47fc-4fc3-8a87-49d37661df1b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61378988-8d37-4a94-ba32-1e2d1341f8d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14540","PortSpecifier":{"PortValue":14540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61378988-8d37-4a94-ba32-1e2d1341f8d9","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61378988-8d37-4a94-ba32-1e2d1341f8d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14540","PortSpecifier":{"PortValue":14540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":582766546},"http":{"id":"61378988-8d37-4a94-ba32-1e2d1341f8d9","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"61378988-8d37-4a94-ba32-1e2d1341f8d9","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"61378988-8d37-4a94-ba32-1e2d1341f8d9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61378988-8d37-4a94-ba32-1e2d1341f8d9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61378988-8d37-4a94-ba32-1e2d1341f8d9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61378988-8d37-4a94-ba32-1e2d1341f8d9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61378988-8d37-4a94-ba32-1e2d1341f8d9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61378988-8d37-4a94-ba32-1e2d1341f8d9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61378988-8d37-4a94-ba32-1e2d1341f8d9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f87b416d-2777-4053-a68a-ca5b1ca8217f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20046","PortSpecifier":{"PortValue":20046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f87b416d-2777-4053-a68a-ca5b1ca8217f","method":"GET","path":"/maas-api/v1/api-keys/38f24dd9-116a-472a-badf-be1b90ef87cd","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f87b416d-2777-4053-a68a-ca5b1ca8217f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20046","PortSpecifier":{"PortValue":20046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":616967595},"http":{"id":"f87b416d-2777-4053-a68a-ca5b1ca8217f","method":"GET","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/38f24dd9-116a-472a-badf-be1b90ef87cd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"f87b416d-2777-4053-a68a-ca5b1ca8217f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f87b416d-2777-4053-a68a-ca5b1ca8217f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f87b416d-2777-4053-a68a-ca5b1ca8217f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f87b416d-2777-4053-a68a-ca5b1ca8217f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/38f24dd9-116a-472a-badf-be1b90ef87cd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f87b416d-2777-4053-a68a-ca5b1ca8217f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f87b416d-2777-4053-a68a-ca5b1ca8217f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f87b416d-2777-4053-a68a-ca5b1ca8217f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f87b416d-2777-4053-a68a-ca5b1ca8217f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4835e0e-e680-4b4c-952b-3b5a4d6d58d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32086","PortSpecifier":{"PortValue":32086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4835e0e-e680-4b4c-952b-3b5a4d6d58d0","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4835e0e-e680-4b4c-952b-3b5a4d6d58d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32086","PortSpecifier":{"PortValue":32086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":651256124},"http":{"id":"d4835e0e-e680-4b4c-952b-3b5a4d6d58d0","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"d4835e0e-e680-4b4c-952b-3b5a4d6d58d0","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d4835e0e-e680-4b4c-952b-3b5a4d6d58d0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4835e0e-e680-4b4c-952b-3b5a4d6d58d0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"64642782-2120-41d9-91d7-6de648fc531e","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e4c728ce-b50e-4946-ae77-6ac1352f934a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4835e0e-e680-4b4c-952b-3b5a4d6d58d0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e4c728ce-b50e-4946-ae77-6ac1352f934a"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"64642782-2120-41d9-91d7-6de648fc531e","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4835e0e-e680-4b4c-952b-3b5a4d6d58d0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4835e0e-e680-4b4c-952b-3b5a4d6d58d0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4835e0e-e680-4b4c-952b-3b5a4d6d58d0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4835e0e-e680-4b4c-952b-3b5a4d6d58d0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f20932b9-0f26-4fc1-8840-bcd93a574c27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46168","PortSpecifier":{"PortValue":46168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f20932b9-0f26-4fc1-8840-bcd93a574c27","method":"DELETE","path":"/maas-api/v1/api-keys/38f24dd9-116a-472a-badf-be1b90ef87cd","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f20932b9-0f26-4fc1-8840-bcd93a574c27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46168","PortSpecifier":{"PortValue":46168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":687295403},"http":{"id":"f20932b9-0f26-4fc1-8840-bcd93a574c27","method":"DELETE","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/38f24dd9-116a-472a-badf-be1b90ef87cd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"f20932b9-0f26-4fc1-8840-bcd93a574c27","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f20932b9-0f26-4fc1-8840-bcd93a574c27","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f20932b9-0f26-4fc1-8840-bcd93a574c27","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"64642782-2120-41d9-91d7-6de648fc531e","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e4c728ce-b50e-4946-ae77-6ac1352f934a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f20932b9-0f26-4fc1-8840-bcd93a574c27","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e4c728ce-b50e-4946-ae77-6ac1352f934a"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"64642782-2120-41d9-91d7-6de648fc531e","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/38f24dd9-116a-472a-badf-be1b90ef87cd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f20932b9-0f26-4fc1-8840-bcd93a574c27","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f20932b9-0f26-4fc1-8840-bcd93a574c27","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f20932b9-0f26-4fc1-8840-bcd93a574c27","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f20932b9-0f26-4fc1-8840-bcd93a574c27","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8bdbadf-09b6-41e6-86ba-0ec2a331c355","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42222","PortSpecifier":{"PortValue":42222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8bdbadf-09b6-41e6-86ba-0ec2a331c355","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8bdbadf-09b6-41e6-86ba-0ec2a331c355","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42222","PortSpecifier":{"PortValue":42222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":723577881},"http":{"id":"d8bdbadf-09b6-41e6-86ba-0ec2a331c355","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"d8bdbadf-09b6-41e6-86ba-0ec2a331c355","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d8bdbadf-09b6-41e6-86ba-0ec2a331c355","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8bdbadf-09b6-41e6-86ba-0ec2a331c355","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"64642782-2120-41d9-91d7-6de648fc531e","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e4c728ce-b50e-4946-ae77-6ac1352f934a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8bdbadf-09b6-41e6-86ba-0ec2a331c355","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e4c728ce-b50e-4946-ae77-6ac1352f934a"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"64642782-2120-41d9-91d7-6de648fc531e","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8bdbadf-09b6-41e6-86ba-0ec2a331c355","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8bdbadf-09b6-41e6-86ba-0ec2a331c355","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8bdbadf-09b6-41e6-86ba-0ec2a331c355","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8bdbadf-09b6-41e6-86ba-0ec2a331c355","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec8e50fa-943d-477d-a160-e6a13e36e94f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14546","PortSpecifier":{"PortValue":14546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec8e50fa-943d-477d-a160-e6a13e36e94f","method":"GET","path":"/maas-api/v1/api-keys/3f5f6352-6e18-48cf-95f2-520bc9977df4","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec8e50fa-943d-477d-a160-e6a13e36e94f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14546","PortSpecifier":{"PortValue":14546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":757325814},"http":{"id":"ec8e50fa-943d-477d-a160-e6a13e36e94f","method":"GET","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3f5f6352-6e18-48cf-95f2-520bc9977df4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"ec8e50fa-943d-477d-a160-e6a13e36e94f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec8e50fa-943d-477d-a160-e6a13e36e94f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec8e50fa-943d-477d-a160-e6a13e36e94f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec8e50fa-943d-477d-a160-e6a13e36e94f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3f5f6352-6e18-48cf-95f2-520bc9977df4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec8e50fa-943d-477d-a160-e6a13e36e94f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec8e50fa-943d-477d-a160-e6a13e36e94f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec8e50fa-943d-477d-a160-e6a13e36e94f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec8e50fa-943d-477d-a160-e6a13e36e94f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a868b45e-ad7f-4c37-8950-a9c314dfad68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36794","PortSpecifier":{"PortValue":36794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a868b45e-ad7f-4c37-8950-a9c314dfad68","method":"DELETE","path":"/maas-api/v1/api-keys/3f5f6352-6e18-48cf-95f2-520bc9977df4","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a868b45e-ad7f-4c37-8950-a9c314dfad68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36794","PortSpecifier":{"PortValue":36794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":790816293},"http":{"id":"a868b45e-ad7f-4c37-8950-a9c314dfad68","method":"DELETE","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/3f5f6352-6e18-48cf-95f2-520bc9977df4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"a868b45e-ad7f-4c37-8950-a9c314dfad68","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a868b45e-ad7f-4c37-8950-a9c314dfad68","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a868b45e-ad7f-4c37-8950-a9c314dfad68","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a868b45e-ad7f-4c37-8950-a9c314dfad68","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/3f5f6352-6e18-48cf-95f2-520bc9977df4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a868b45e-ad7f-4c37-8950-a9c314dfad68","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a868b45e-ad7f-4c37-8950-a9c314dfad68","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a868b45e-ad7f-4c37-8950-a9c314dfad68","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a868b45e-ad7f-4c37-8950-a9c314dfad68","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45fce113-e0e2-42fd-958d-fd7feb5cd6ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32098","PortSpecifier":{"PortValue":32098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45fce113-e0e2-42fd-958d-fd7feb5cd6ea","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45fce113-e0e2-42fd-958d-fd7feb5cd6ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32098","PortSpecifier":{"PortValue":32098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":824445352},"http":{"id":"45fce113-e0e2-42fd-958d-fd7feb5cd6ea","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"45fce113-e0e2-42fd-958d-fd7feb5cd6ea","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"45fce113-e0e2-42fd-958d-fd7feb5cd6ea","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45fce113-e0e2-42fd-958d-fd7feb5cd6ea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45fce113-e0e2-42fd-958d-fd7feb5cd6ea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45fce113-e0e2-42fd-958d-fd7feb5cd6ea","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45fce113-e0e2-42fd-958d-fd7feb5cd6ea","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45fce113-e0e2-42fd-958d-fd7feb5cd6ea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45fce113-e0e2-42fd-958d-fd7feb5cd6ea","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39cb616a-5ccf-9c20-abcd-2d227a196c50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20050","PortSpecifier":{"PortValue":20050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39cb616a-5ccf-9c20-abcd-2d227a196c50","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39cb616a-5ccf-9c20-abcd-2d227a196c50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20050","PortSpecifier":{"PortValue":20050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":857521154},"http":{"id":"39cb616a-5ccf-9c20-abcd-2d227a196c50","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"39cb616a-5ccf-9c20-abcd-2d227a196c50","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"39cb616a-5ccf-9c20-abcd-2d227a196c50","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39cb616a-5ccf-9c20-abcd-2d227a196c50","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39cb616a-5ccf-9c20-abcd-2d227a196c50","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39cb616a-5ccf-9c20-abcd-2d227a196c50","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39cb616a-5ccf-9c20-abcd-2d227a196c50","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39cb616a-5ccf-9c20-abcd-2d227a196c50","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39cb616a-5ccf-9c20-abcd-2d227a196c50","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0e1f2da-9b92-4f0d-8235-3961fe9f2043","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42226","PortSpecifier":{"PortValue":42226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0e1f2da-9b92-4f0d-8235-3961fe9f2043","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0e1f2da-9b92-4f0d-8235-3961fe9f2043","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42226","PortSpecifier":{"PortValue":42226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":892177919},"http":{"id":"a0e1f2da-9b92-4f0d-8235-3961fe9f2043","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"a0e1f2da-9b92-4f0d-8235-3961fe9f2043","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a0e1f2da-9b92-4f0d-8235-3961fe9f2043","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0e1f2da-9b92-4f0d-8235-3961fe9f2043","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0e1f2da-9b92-4f0d-8235-3961fe9f2043","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0e1f2da-9b92-4f0d-8235-3961fe9f2043","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0e1f2da-9b92-4f0d-8235-3961fe9f2043","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0e1f2da-9b92-4f0d-8235-3961fe9f2043","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0e1f2da-9b92-4f0d-8235-3961fe9f2043","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ec24b58-35fd-4f62-9f6a-5850ba116041","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46178","PortSpecifier":{"PortValue":46178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ec24b58-35fd-4f62-9f6a-5850ba116041","method":"GET","path":"/maas-api/v1/api-keys/f73faa48-06d8-49a7-896b-8c35a7c2d73c","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ec24b58-35fd-4f62-9f6a-5850ba116041","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46178","PortSpecifier":{"PortValue":46178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":925315950},"http":{"id":"5ec24b58-35fd-4f62-9f6a-5850ba116041","method":"GET","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f73faa48-06d8-49a7-896b-8c35a7c2d73c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"5ec24b58-35fd-4f62-9f6a-5850ba116041","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5ec24b58-35fd-4f62-9f6a-5850ba116041","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ec24b58-35fd-4f62-9f6a-5850ba116041","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ec24b58-35fd-4f62-9f6a-5850ba116041","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f73faa48-06d8-49a7-896b-8c35a7c2d73c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ec24b58-35fd-4f62-9f6a-5850ba116041","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ec24b58-35fd-4f62-9f6a-5850ba116041","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ec24b58-35fd-4f62-9f6a-5850ba116041","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ec24b58-35fd-4f62-9f6a-5850ba116041","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89233e8b-9012-41e6-a4be-064405bc8562","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36806","PortSpecifier":{"PortValue":36806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89233e8b-9012-41e6-a4be-064405bc8562","method":"POST","path":"/maas-api/v1/api-keys/bulk-revoke","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89233e8b-9012-41e6-a4be-064405bc8562","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36806","PortSpecifier":{"PortValue":36806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":955576939},"http":{"id":"89233e8b-9012-41e6-a4be-064405bc8562","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"89233e8b-9012-41e6-a4be-064405bc8562","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"89233e8b-9012-41e6-a4be-064405bc8562","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89233e8b-9012-41e6-a4be-064405bc8562","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89233e8b-9012-41e6-a4be-064405bc8562","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89233e8b-9012-41e6-a4be-064405bc8562","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89233e8b-9012-41e6-a4be-064405bc8562","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89233e8b-9012-41e6-a4be-064405bc8562","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89233e8b-9012-41e6-a4be-064405bc8562","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34942fa4-2c61-4ced-9e19-bf086d371079","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14558","PortSpecifier":{"PortValue":14558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34942fa4-2c61-4ced-9e19-bf086d371079","method":"GET","path":"/maas-api/v1/api-keys/f73faa48-06d8-49a7-896b-8c35a7c2d73c","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34942fa4-2c61-4ced-9e19-bf086d371079","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14558","PortSpecifier":{"PortValue":14558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964090,"nanos":988346441},"http":{"id":"34942fa4-2c61-4ced-9e19-bf086d371079","method":"GET","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f73faa48-06d8-49a7-896b-8c35a7c2d73c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"34942fa4-2c61-4ced-9e19-bf086d371079","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"34942fa4-2c61-4ced-9e19-bf086d371079","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34942fa4-2c61-4ced-9e19-bf086d371079","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34942fa4-2c61-4ced-9e19-bf086d371079","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f73faa48-06d8-49a7-896b-8c35a7c2d73c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34942fa4-2c61-4ced-9e19-bf086d371079","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34942fa4-2c61-4ced-9e19-bf086d371079","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34942fa4-2c61-4ced-9e19-bf086d371079","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34942fa4-2c61-4ced-9e19-bf086d371079","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d80dc7f-a850-4efb-a92d-96dc0bda7ab7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20056","PortSpecifier":{"PortValue":20056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d80dc7f-a850-4efb-a92d-96dc0bda7ab7","method":"GET","path":"/maas-api/v1/api-keys/6c51809a-4ec4-48df-af7b-48981b58a64e","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d80dc7f-a850-4efb-a92d-96dc0bda7ab7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20056","PortSpecifier":{"PortValue":20056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964091,"nanos":22653071},"http":{"id":"4d80dc7f-a850-4efb-a92d-96dc0bda7ab7","method":"GET","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6c51809a-4ec4-48df-af7b-48981b58a64e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"4d80dc7f-a850-4efb-a92d-96dc0bda7ab7","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4d80dc7f-a850-4efb-a92d-96dc0bda7ab7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d80dc7f-a850-4efb-a92d-96dc0bda7ab7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d80dc7f-a850-4efb-a92d-96dc0bda7ab7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6c51809a-4ec4-48df-af7b-48981b58a64e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d80dc7f-a850-4efb-a92d-96dc0bda7ab7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d80dc7f-a850-4efb-a92d-96dc0bda7ab7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d80dc7f-a850-4efb-a92d-96dc0bda7ab7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d80dc7f-a850-4efb-a92d-96dc0bda7ab7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3537302-f8a9-490b-93cc-c64b2e86eae4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42228","PortSpecifier":{"PortValue":42228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3537302-f8a9-490b-93cc-c64b2e86eae4","method":"GET","path":"/maas-api/v1/api-keys/3e580c34-dc32-40e3-aefe-3c61fca11bef","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3537302-f8a9-490b-93cc-c64b2e86eae4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42228","PortSpecifier":{"PortValue":42228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964091,"nanos":58078407},"http":{"id":"c3537302-f8a9-490b-93cc-c64b2e86eae4","method":"GET","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3e580c34-dc32-40e3-aefe-3c61fca11bef",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c3537302-f8a9-490b-93cc-c64b2e86eae4","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c3537302-f8a9-490b-93cc-c64b2e86eae4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3537302-f8a9-490b-93cc-c64b2e86eae4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3537302-f8a9-490b-93cc-c64b2e86eae4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3e580c34-dc32-40e3-aefe-3c61fca11bef",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3537302-f8a9-490b-93cc-c64b2e86eae4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3537302-f8a9-490b-93cc-c64b2e86eae4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3537302-f8a9-490b-93cc-c64b2e86eae4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3537302-f8a9-490b-93cc-c64b2e86eae4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2007bd6c-c8e5-43d8-be4d-3d00b0aaf523","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32110","PortSpecifier":{"PortValue":32110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2007bd6c-c8e5-43d8-be4d-3d00b0aaf523","method":"POST","path":"/maas-api/v1/api-keys/bulk-revoke","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2007bd6c-c8e5-43d8-be4d-3d00b0aaf523","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32110","PortSpecifier":{"PortValue":32110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964091,"nanos":97473462},"http":{"id":"2007bd6c-c8e5-43d8-be4d-3d00b0aaf523","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"2007bd6c-c8e5-43d8-be4d-3d00b0aaf523","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2007bd6c-c8e5-43d8-be4d-3d00b0aaf523","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2007bd6c-c8e5-43d8-be4d-3d00b0aaf523","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2007bd6c-c8e5-43d8-be4d-3d00b0aaf523","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2007bd6c-c8e5-43d8-be4d-3d00b0aaf523","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2007bd6c-c8e5-43d8-be4d-3d00b0aaf523","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2007bd6c-c8e5-43d8-be4d-3d00b0aaf523","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2007bd6c-c8e5-43d8-be4d-3d00b0aaf523","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"274a6157-3a9e-4295-beae-d69fac7086e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14566","PortSpecifier":{"PortValue":14566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"274a6157-3a9e-4295-beae-d69fac7086e3","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"274a6157-3a9e-4295-beae-d69fac7086e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14566","PortSpecifier":{"PortValue":14566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964091,"nanos":134724885},"http":{"id":"274a6157-3a9e-4295-beae-d69fac7086e3","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"274a6157-3a9e-4295-beae-d69fac7086e3","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"274a6157-3a9e-4295-beae-d69fac7086e3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"274a6157-3a9e-4295-beae-d69fac7086e3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"274a6157-3a9e-4295-beae-d69fac7086e3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"274a6157-3a9e-4295-beae-d69fac7086e3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"274a6157-3a9e-4295-beae-d69fac7086e3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"274a6157-3a9e-4295-beae-d69fac7086e3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"274a6157-3a9e-4295-beae-d69fac7086e3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e681d787-5cb8-4c9e-b98e-30fdac730fd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46190","PortSpecifier":{"PortValue":46190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e681d787-5cb8-4c9e-b98e-30fdac730fd0","method":"GET","path":"/maas-api/v1/api-keys/21a19dfe-ca25-42f3-8444-fd160e66903a","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e681d787-5cb8-4c9e-b98e-30fdac730fd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46190","PortSpecifier":{"PortValue":46190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964091,"nanos":176049694},"http":{"id":"e681d787-5cb8-4c9e-b98e-30fdac730fd0","method":"GET","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/21a19dfe-ca25-42f3-8444-fd160e66903a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"e681d787-5cb8-4c9e-b98e-30fdac730fd0","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e681d787-5cb8-4c9e-b98e-30fdac730fd0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e681d787-5cb8-4c9e-b98e-30fdac730fd0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e681d787-5cb8-4c9e-b98e-30fdac730fd0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/21a19dfe-ca25-42f3-8444-fd160e66903a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e681d787-5cb8-4c9e-b98e-30fdac730fd0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e681d787-5cb8-4c9e-b98e-30fdac730fd0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e681d787-5cb8-4c9e-b98e-30fdac730fd0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e681d787-5cb8-4c9e-b98e-30fdac730fd0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38a722ca-f519-4285-8690-764bc33f5adb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36816","PortSpecifier":{"PortValue":36816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"38a722ca-f519-4285-8690-764bc33f5adb","method":"POST","path":"/maas-api/v1/api-keys/bulk-revoke","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38a722ca-f519-4285-8690-764bc33f5adb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36816","PortSpecifier":{"PortValue":36816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964091,"nanos":206199388},"http":{"id":"38a722ca-f519-4285-8690-764bc33f5adb","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"38a722ca-f519-4285-8690-764bc33f5adb","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"38a722ca-f519-4285-8690-764bc33f5adb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"38a722ca-f519-4285-8690-764bc33f5adb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"64642782-2120-41d9-91d7-6de648fc531e","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e4c728ce-b50e-4946-ae77-6ac1352f934a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"38a722ca-f519-4285-8690-764bc33f5adb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e4c728ce-b50e-4946-ae77-6ac1352f934a"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"64642782-2120-41d9-91d7-6de648fc531e","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38a722ca-f519-4285-8690-764bc33f5adb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38a722ca-f519-4285-8690-764bc33f5adb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38a722ca-f519-4285-8690-764bc33f5adb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38a722ca-f519-4285-8690-764bc33f5adb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c297fa63-ff2d-4411-8555-3c067729a1e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20062","PortSpecifier":{"PortValue":20062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c297fa63-ff2d-4411-8555-3c067729a1e9","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c297fa63-ff2d-4411-8555-3c067729a1e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20062","PortSpecifier":{"PortValue":20062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964091,"nanos":243167964},"http":{"id":"c297fa63-ff2d-4411-8555-3c067729a1e9","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c297fa63-ff2d-4411-8555-3c067729a1e9","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c297fa63-ff2d-4411-8555-3c067729a1e9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c297fa63-ff2d-4411-8555-3c067729a1e9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c297fa63-ff2d-4411-8555-3c067729a1e9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c297fa63-ff2d-4411-8555-3c067729a1e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c297fa63-ff2d-4411-8555-3c067729a1e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c297fa63-ff2d-4411-8555-3c067729a1e9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c297fa63-ff2d-4411-8555-3c067729a1e9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b953eb2-b489-4e14-b529-2152d9b9d10c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42244","PortSpecifier":{"PortValue":42244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b953eb2-b489-4e14-b529-2152d9b9d10c","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b953eb2-b489-4e14-b529-2152d9b9d10c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42244","PortSpecifier":{"PortValue":42244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964091,"nanos":277729829},"http":{"id":"9b953eb2-b489-4e14-b529-2152d9b9d10c","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"9b953eb2-b489-4e14-b529-2152d9b9d10c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9b953eb2-b489-4e14-b529-2152d9b9d10c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b953eb2-b489-4e14-b529-2152d9b9d10c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b953eb2-b489-4e14-b529-2152d9b9d10c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b953eb2-b489-4e14-b529-2152d9b9d10c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b953eb2-b489-4e14-b529-2152d9b9d10c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b953eb2-b489-4e14-b529-2152d9b9d10c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b953eb2-b489-4e14-b529-2152d9b9d10c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b136ce9c-699b-49d5-a160-01c3bd3ebede","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14574","PortSpecifier":{"PortValue":14574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b136ce9c-699b-49d5-a160-01c3bd3ebede","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b136ce9c-699b-49d5-a160-01c3bd3ebede","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14574","PortSpecifier":{"PortValue":14574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964091,"nanos":315369925},"http":{"id":"b136ce9c-699b-49d5-a160-01c3bd3ebede","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"b136ce9c-699b-49d5-a160-01c3bd3ebede","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b136ce9c-699b-49d5-a160-01c3bd3ebede","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b136ce9c-699b-49d5-a160-01c3bd3ebede","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b136ce9c-699b-49d5-a160-01c3bd3ebede","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b136ce9c-699b-49d5-a160-01c3bd3ebede","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b136ce9c-699b-49d5-a160-01c3bd3ebede","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b136ce9c-699b-49d5-a160-01c3bd3ebede","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b136ce9c-699b-49d5-a160-01c3bd3ebede","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4117d31-3c43-428d-881c-ec995d099069","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20074","PortSpecifier":{"PortValue":20074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4117d31-3c43-428d-881c-ec995d099069","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4117d31-3c43-428d-881c-ec995d099069","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20074","PortSpecifier":{"PortValue":20074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964091,"nanos":348709901},"http":{"id":"d4117d31-3c43-428d-881c-ec995d099069","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"d4117d31-3c43-428d-881c-ec995d099069","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d4117d31-3c43-428d-881c-ec995d099069","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4117d31-3c43-428d-881c-ec995d099069","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4117d31-3c43-428d-881c-ec995d099069","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4117d31-3c43-428d-881c-ec995d099069","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4117d31-3c43-428d-881c-ec995d099069","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4117d31-3c43-428d-881c-ec995d099069","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4117d31-3c43-428d-881c-ec995d099069","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"816f5b79-6427-455b-a79a-57452f8bab22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32114","PortSpecifier":{"PortValue":32114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"816f5b79-6427-455b-a79a-57452f8bab22","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"816f5b79-6427-455b-a79a-57452f8bab22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32114","PortSpecifier":{"PortValue":32114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964091,"nanos":385387527},"http":{"id":"816f5b79-6427-455b-a79a-57452f8bab22","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"816f5b79-6427-455b-a79a-57452f8bab22","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"816f5b79-6427-455b-a79a-57452f8bab22","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"816f5b79-6427-455b-a79a-57452f8bab22","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"816f5b79-6427-455b-a79a-57452f8bab22","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"816f5b79-6427-455b-a79a-57452f8bab22","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"816f5b79-6427-455b-a79a-57452f8bab22","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"816f5b79-6427-455b-a79a-57452f8bab22","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"816f5b79-6427-455b-a79a-57452f8bab22","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5678e32d-813d-4959-ab66-2065a0875b87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46192","PortSpecifier":{"PortValue":46192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5678e32d-813d-4959-ab66-2065a0875b87","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5678e32d-813d-4959-ab66-2065a0875b87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46192","PortSpecifier":{"PortValue":46192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964091,"nanos":421449115},"http":{"id":"5678e32d-813d-4959-ab66-2065a0875b87","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"5678e32d-813d-4959-ab66-2065a0875b87","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5678e32d-813d-4959-ab66-2065a0875b87","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5678e32d-813d-4959-ab66-2065a0875b87","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5678e32d-813d-4959-ab66-2065a0875b87","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5678e32d-813d-4959-ab66-2065a0875b87","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5678e32d-813d-4959-ab66-2065a0875b87","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5678e32d-813d-4959-ab66-2065a0875b87","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5678e32d-813d-4959-ab66-2065a0875b87","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2826331-3bb0-44aa-b5d8-8d1de9894be2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36822","PortSpecifier":{"PortValue":36822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2826331-3bb0-44aa-b5d8-8d1de9894be2","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2826331-3bb0-44aa-b5d8-8d1de9894be2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36822","PortSpecifier":{"PortValue":36822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964091,"nanos":455464461},"http":{"id":"b2826331-3bb0-44aa-b5d8-8d1de9894be2","method":"GET","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"b2826331-3bb0-44aa-b5d8-8d1de9894be2","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b2826331-3bb0-44aa-b5d8-8d1de9894be2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2826331-3bb0-44aa-b5d8-8d1de9894be2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2826331-3bb0-44aa-b5d8-8d1de9894be2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2826331-3bb0-44aa-b5d8-8d1de9894be2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2826331-3bb0-44aa-b5d8-8d1de9894be2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2826331-3bb0-44aa-b5d8-8d1de9894be2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2826331-3bb0-44aa-b5d8-8d1de9894be2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf766763-d33f-4569-8215-3d4ebd003d83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:45056","PortSpecifier":{"PortValue":45056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf766763-d33f-4569-8215-3d4ebd003d83","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf766763-d33f-4569-8215-3d4ebd003d83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:45056","PortSpecifier":{"PortValue":45056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964091,"nanos":470059750},"http":{"id":"cf766763-d33f-4569-8215-3d4ebd003d83","method":"GET","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cf766763-d33f-4569-8215-3d4ebd003d83","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf766763-d33f-4569-8215-3d4ebd003d83","config":{"Name":"kubernetes-tokens","Priority":1,"Conditions":{"Left":{"Selector":"request.url_path","Operator":5,"Value":".*/v1/models$"},"Right":{"Left":{"Selector":"request.headers.authorization","Operator":2,"Value":""},"Right":{"Left":null,"Right":null}}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cf766763-d33f-4569-8215-3d4ebd003d83","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cf766763-d33f-4569-8215-3d4ebd003d83","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf766763-d33f-4569-8215-3d4ebd003d83","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}},"metadata":{"subscription-info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.28","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-7bf8458756-7sxzp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.134.0.28","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"cf766763-d33f-4569-8215-3d4ebd003d83"},"host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","id":"cf766763-d33f-4569-8215-3d4ebd003d83","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":470059750,"seconds":1780964091},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.134.0.28:45056","port":45056}}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf766763-d33f-4569-8215-3d4ebd003d83","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf766763-d33f-4569-8215-3d4ebd003d83","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf766763-d33f-4569-8215-3d4ebd003d83","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf766763-d33f-4569-8215-3d4ebd003d83","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cf766763-d33f-4569-8215-3d4ebd003d83","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: apiKeyValidation"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf766763-d33f-4569-8215-3d4ebd003d83","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":""} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf766763-d33f-4569-8215-3d4ebd003d83","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf766763-d33f-4569-8215-3d4ebd003d83","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b8465b8-4784-4903-b0db-4771b4f4d04a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42250","PortSpecifier":{"PortValue":42250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b8465b8-4784-4903-b0db-4771b4f4d04a","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b8465b8-4784-4903-b0db-4771b4f4d04a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42250","PortSpecifier":{"PortValue":42250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964091,"nanos":500523385},"http":{"id":"0b8465b8-4784-4903-b0db-4771b4f4d04a","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b8465b8-4784-4903-b0db-4771b4f4d04a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OSJW3s1x93UA6Ymz_pecxPimlGDTntU5xOZLpyqh3V51iWnJyh4pizUl7ghL"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0b8465b8-4784-4903-b0db-4771b4f4d04a","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OSJW3s1x93UA6Ymz_pecxPimlGDTntU5xOZLpyqh3V51iWnJyh4pizUl7ghL\"}"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0b8465b8-4784-4903-b0db-4771b4f4d04a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0b8465b8-4784-4903-b0db-4771b4f4d04a","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0b8465b8-4784-4903-b0db-4771b4f4d04a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b8465b8-4784-4903-b0db-4771b4f4d04a","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b8465b8-4784-4903-b0db-4771b4f4d04a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b8465b8-4784-4903-b0db-4771b4f4d04a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b8465b8-4784-4903-b0db-4771b4f4d04a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b8465b8-4784-4903-b0db-4771b4f4d04a","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b8465b8-4784-4903-b0db-4771b4f4d04a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b8465b8-4784-4903-b0db-4771b4f4d04a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"14d4dafb-3e04-4807-b6bf-c83c6bb7d461","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b8465b8-4784-4903-b0db-4771b4f4d04a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b8465b8-4784-4903-b0db-4771b4f4d04a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dff91211-ed49-42d9-b155-52865a200163","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14582","PortSpecifier":{"PortValue":14582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dff91211-ed49-42d9-b155-52865a200163","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dff91211-ed49-42d9-b155-52865a200163","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14582","PortSpecifier":{"PortValue":14582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964091,"nanos":529847530},"http":{"id":"dff91211-ed49-42d9-b155-52865a200163","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dff91211-ed49-42d9-b155-52865a200163","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-invalid-key-12345"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dff91211-ed49-42d9-b155-52865a200163","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-invalid-key-12345\"}"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dff91211-ed49-42d9-b155-52865a200163","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** key format","valid":false}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"dff91211-ed49-42d9-b155-52865a200163","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dff91211-ed49-42d9-b155-52865a200163","input":{"auth":{"identity":"Bearer **** key format","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"dff91211-ed49-42d9-b155-52865a200163","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dff91211-ed49-42d9-b155-52865a200163","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dff91211-ed49-42d9-b155-52865a200163","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"073dfc2e-7e6d-4d13-b762-0195c94b0147","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20086","PortSpecifier":{"PortValue":20086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"073dfc2e-7e6d-4d13-b762-0195c94b0147","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"073dfc2e-7e6d-4d13-b762-0195c94b0147","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20086","PortSpecifier":{"PortValue":20086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964091,"nanos":553879422},"http":{"id":"073dfc2e-7e6d-4d13-b762-0195c94b0147","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-7bf8458756-7sxzp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"073dfc2e-7e6d-4d13-b762-0195c94b0147"},"path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"metadata_context":{}}} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"073dfc2e-7e6d-4d13-b762-0195c94b0147","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"073dfc2e-7e6d-4d13-b762-0195c94b0147","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24c975b1-c219-4802-96bf-12025e2e003e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32124","PortSpecifier":{"PortValue":32124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24c975b1-c219-4802-96bf-12025e2e003e","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24c975b1-c219-4802-96bf-12025e2e003e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32124","PortSpecifier":{"PortValue":32124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964091,"nanos":576070789},"http":{"id":"24c975b1-c219-4802-96bf-12025e2e003e","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"24c975b1-c219-4802-96bf-12025e2e003e","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"24c975b1-c219-4802-96bf-12025e2e003e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24c975b1-c219-4802-96bf-12025e2e003e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24c975b1-c219-4802-96bf-12025e2e003e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24c975b1-c219-4802-96bf-12025e2e003e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24c975b1-c219-4802-96bf-12025e2e003e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24c975b1-c219-4802-96bf-12025e2e003e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24c975b1-c219-4802-96bf-12025e2e003e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffa1951f-f47b-4377-b5a5-b344abcdd9b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42258","PortSpecifier":{"PortValue":42258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ffa1951f-f47b-4377-b5a5-b344abcdd9b6","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffa1951f-f47b-4377-b5a5-b344abcdd9b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42258","PortSpecifier":{"PortValue":42258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964091,"nanos":609462198},"http":{"id":"ffa1951f-f47b-4377-b5a5-b344abcdd9b6","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ffa1951f-f47b-4377-b5a5-b344abcdd9b6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hnY7VSZsvCguunXS_r7Yp9M5Ihn19pdwJTeDi18xs1Smd5NusBJO8Ggejbe0"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ffa1951f-f47b-4377-b5a5-b344abcdd9b6","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hnY7VSZsvCguunXS_r7Yp9M5Ihn19pdwJTeDi18xs1Smd5NusBJO8Ggejbe0\"}"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ffa1951f-f47b-4377-b5a5-b344abcdd9b6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ffa1951f-f47b-4377-b5a5-b344abcdd9b6","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ffa1951f-f47b-4377-b5a5-b344abcdd9b6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ffa1951f-f47b-4377-b5a5-b344abcdd9b6","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffa1951f-f47b-4377-b5a5-b344abcdd9b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffa1951f-f47b-4377-b5a5-b344abcdd9b6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffa1951f-f47b-4377-b5a5-b344abcdd9b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffa1951f-f47b-4377-b5a5-b344abcdd9b6","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffa1951f-f47b-4377-b5a5-b344abcdd9b6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffa1951f-f47b-4377-b5a5-b344abcdd9b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"352fc4cf-36c2-4f07-befb-fad1d123cf8a","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffa1951f-f47b-4377-b5a5-b344abcdd9b6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffa1951f-f47b-4377-b5a5-b344abcdd9b6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"262e4621-f274-4f9f-83e2-d3ee506aa06d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14596","PortSpecifier":{"PortValue":14596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"262e4621-f274-4f9f-83e2-d3ee506aa06d","method":"DELETE","path":"/maas-api/v1/api-keys/352fc4cf-36c2-4f07-befb-fad1d123cf8a","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"262e4621-f274-4f9f-83e2-d3ee506aa06d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14596","PortSpecifier":{"PortValue":14596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964091,"nanos":639382232},"http":{"id":"262e4621-f274-4f9f-83e2-d3ee506aa06d","method":"DELETE","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/352fc4cf-36c2-4f07-befb-fad1d123cf8a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"262e4621-f274-4f9f-83e2-d3ee506aa06d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"262e4621-f274-4f9f-83e2-d3ee506aa06d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"262e4621-f274-4f9f-83e2-d3ee506aa06d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"262e4621-f274-4f9f-83e2-d3ee506aa06d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/352fc4cf-36c2-4f07-befb-fad1d123cf8a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"262e4621-f274-4f9f-83e2-d3ee506aa06d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"262e4621-f274-4f9f-83e2-d3ee506aa06d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"262e4621-f274-4f9f-83e2-d3ee506aa06d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"262e4621-f274-4f9f-83e2-d3ee506aa06d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88ab036c-112c-4bf9-88c3-8649470a5b4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20088","PortSpecifier":{"PortValue":20088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88ab036c-112c-4bf9-88c3-8649470a5b4d","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88ab036c-112c-4bf9-88c3-8649470a5b4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20088","PortSpecifier":{"PortValue":20088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964093,"nanos":676556014},"http":{"id":"88ab036c-112c-4bf9-88c3-8649470a5b4d","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88ab036c-112c-4bf9-88c3-8649470a5b4d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hnY7VSZsvCguunXS_r7Yp9M5Ihn19pdwJTeDi18xs1Smd5NusBJO8Ggejbe0"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"88ab036c-112c-4bf9-88c3-8649470a5b4d","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hnY7VSZsvCguunXS_r7Yp9M5Ihn19pdwJTeDi18xs1Smd5NusBJO8Ggejbe0\"}"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"88ab036c-112c-4bf9-88c3-8649470a5b4d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"88ab036c-112c-4bf9-88c3-8649470a5b4d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88ab036c-112c-4bf9-88c3-8649470a5b4d","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"88ab036c-112c-4bf9-88c3-8649470a5b4d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88ab036c-112c-4bf9-88c3-8649470a5b4d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88ab036c-112c-4bf9-88c3-8649470a5b4d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73dbee54-53e6-4732-8a4a-fabf0f96f8f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42268","PortSpecifier":{"PortValue":42268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73dbee54-53e6-4732-8a4a-fabf0f96f8f4","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73dbee54-53e6-4732-8a4a-fabf0f96f8f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42268","PortSpecifier":{"PortValue":42268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964093,"nanos":709513730},"http":{"id":"73dbee54-53e6-4732-8a4a-fabf0f96f8f4","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73dbee54-53e6-4732-8a4a-fabf0f96f8f4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OSJW3s1x93UA6Ymz_pecxPimlGDTntU5xOZLpyqh3V51iWnJyh4pizUl7ghL"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"73dbee54-53e6-4732-8a4a-fabf0f96f8f4","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OSJW3s1x93UA6Ymz_pecxPimlGDTntU5xOZLpyqh3V51iWnJyh4pizUl7ghL\"}"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"73dbee54-53e6-4732-8a4a-fabf0f96f8f4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"73dbee54-53e6-4732-8a4a-fabf0f96f8f4","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"73dbee54-53e6-4732-8a4a-fabf0f96f8f4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73dbee54-53e6-4732-8a4a-fabf0f96f8f4","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73dbee54-53e6-4732-8a4a-fabf0f96f8f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73dbee54-53e6-4732-8a4a-fabf0f96f8f4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73dbee54-53e6-4732-8a4a-fabf0f96f8f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73dbee54-53e6-4732-8a4a-fabf0f96f8f4","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73dbee54-53e6-4732-8a4a-fabf0f96f8f4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73dbee54-53e6-4732-8a4a-fabf0f96f8f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"14d4dafb-3e04-4807-b6bf-c83c6bb7d461","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73dbee54-53e6-4732-8a4a-fabf0f96f8f4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73dbee54-53e6-4732-8a4a-fabf0f96f8f4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a9aef5f-3363-42b0-ae00-09858146e274","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14606","PortSpecifier":{"PortValue":14606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a9aef5f-3363-42b0-ae00-09858146e274","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a9aef5f-3363-42b0-ae00-09858146e274","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14606","PortSpecifier":{"PortValue":14606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964093,"nanos":742126397},"http":{"id":"9a9aef5f-3363-42b0-ae00-09858146e274","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"9a9aef5f-3363-42b0-ae00-09858146e274","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9a9aef5f-3363-42b0-ae00-09858146e274","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a9aef5f-3363-42b0-ae00-09858146e274","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a9aef5f-3363-42b0-ae00-09858146e274","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a9aef5f-3363-42b0-ae00-09858146e274","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a9aef5f-3363-42b0-ae00-09858146e274","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a9aef5f-3363-42b0-ae00-09858146e274","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a9aef5f-3363-42b0-ae00-09858146e274","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"409a1a65-d0f4-43ef-9690-2bf1d50de011","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20090","PortSpecifier":{"PortValue":20090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"409a1a65-d0f4-43ef-9690-2bf1d50de011","method":"DELETE","path":"/maas-api/v1/api-keys/7b299cee-b497-44aa-b189-0064c4617a87","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"409a1a65-d0f4-43ef-9690-2bf1d50de011","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20090","PortSpecifier":{"PortValue":20090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964093,"nanos":782450482},"http":{"id":"409a1a65-d0f4-43ef-9690-2bf1d50de011","method":"DELETE","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/7b299cee-b497-44aa-b189-0064c4617a87",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"409a1a65-d0f4-43ef-9690-2bf1d50de011","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"409a1a65-d0f4-43ef-9690-2bf1d50de011","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"409a1a65-d0f4-43ef-9690-2bf1d50de011","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"409a1a65-d0f4-43ef-9690-2bf1d50de011","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/7b299cee-b497-44aa-b189-0064c4617a87",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"409a1a65-d0f4-43ef-9690-2bf1d50de011","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"409a1a65-d0f4-43ef-9690-2bf1d50de011","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"409a1a65-d0f4-43ef-9690-2bf1d50de011","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"409a1a65-d0f4-43ef-9690-2bf1d50de011","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1cc72be4-e942-4161-a674-db1b632a8b2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46198","PortSpecifier":{"PortValue":46198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1cc72be4-e942-4161-a674-db1b632a8b2a","method":"DELETE","path":"/maas-api/v1/api-keys/7b299cee-b497-44aa-b189-0064c4617a87","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1cc72be4-e942-4161-a674-db1b632a8b2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46198","PortSpecifier":{"PortValue":46198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964093,"nanos":818773902},"http":{"id":"1cc72be4-e942-4161-a674-db1b632a8b2a","method":"DELETE","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/7b299cee-b497-44aa-b189-0064c4617a87",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"1cc72be4-e942-4161-a674-db1b632a8b2a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1cc72be4-e942-4161-a674-db1b632a8b2a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1cc72be4-e942-4161-a674-db1b632a8b2a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1cc72be4-e942-4161-a674-db1b632a8b2a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/7b299cee-b497-44aa-b189-0064c4617a87",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1cc72be4-e942-4161-a674-db1b632a8b2a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1cc72be4-e942-4161-a674-db1b632a8b2a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1cc72be4-e942-4161-a674-db1b632a8b2a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1cc72be4-e942-4161-a674-db1b632a8b2a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3d22883-551a-9244-81b1-7e655c8f9796","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42284","PortSpecifier":{"PortValue":42284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3d22883-551a-9244-81b1-7e655c8f9796","method":"DELETE","path":"/maas-api/v1/api-keys/nonexistent-uuid-12345","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3d22883-551a-9244-81b1-7e655c8f9796","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42284","PortSpecifier":{"PortValue":42284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964093,"nanos":854098799},"http":{"id":"c3d22883-551a-9244-81b1-7e655c8f9796","method":"DELETE","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/nonexistent-uuid-12345",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c3d22883-551a-9244-81b1-7e655c8f9796","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c3d22883-551a-9244-81b1-7e655c8f9796","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3d22883-551a-9244-81b1-7e655c8f9796","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3d22883-551a-9244-81b1-7e655c8f9796","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/nonexistent-uuid-12345",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3d22883-551a-9244-81b1-7e655c8f9796","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3d22883-551a-9244-81b1-7e655c8f9796","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3d22883-551a-9244-81b1-7e655c8f9796","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3d22883-551a-9244-81b1-7e655c8f9796","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9eab872f-bfef-4617-83ef-67dbb6b4a988","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36838","PortSpecifier":{"PortValue":36838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9eab872f-bfef-4617-83ef-67dbb6b4a988","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9eab872f-bfef-4617-83ef-67dbb6b4a988","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36838","PortSpecifier":{"PortValue":36838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964093,"nanos":887537828},"http":{"id":"9eab872f-bfef-4617-83ef-67dbb6b4a988","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"9eab872f-bfef-4617-83ef-67dbb6b4a988","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9eab872f-bfef-4617-83ef-67dbb6b4a988","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9eab872f-bfef-4617-83ef-67dbb6b4a988","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9eab872f-bfef-4617-83ef-67dbb6b4a988","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9eab872f-bfef-4617-83ef-67dbb6b4a988","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9eab872f-bfef-4617-83ef-67dbb6b4a988","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9eab872f-bfef-4617-83ef-67dbb6b4a988","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9eab872f-bfef-4617-83ef-67dbb6b4a988","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b8b3123-5068-43b5-9383-9fb8e39fb780","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14616","PortSpecifier":{"PortValue":14616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b8b3123-5068-43b5-9383-9fb8e39fb780","method":"DELETE","path":"/maas-api/v1/api-keys/d5f74f1e-8e94-4d48-8149-3ee8b456425b","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b8b3123-5068-43b5-9383-9fb8e39fb780","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14616","PortSpecifier":{"PortValue":14616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964093,"nanos":921563723},"http":{"id":"6b8b3123-5068-43b5-9383-9fb8e39fb780","method":"DELETE","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/d5f74f1e-8e94-4d48-8149-3ee8b456425b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"6b8b3123-5068-43b5-9383-9fb8e39fb780","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6b8b3123-5068-43b5-9383-9fb8e39fb780","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b8b3123-5068-43b5-9383-9fb8e39fb780","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b8b3123-5068-43b5-9383-9fb8e39fb780","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/d5f74f1e-8e94-4d48-8149-3ee8b456425b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b8b3123-5068-43b5-9383-9fb8e39fb780","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b8b3123-5068-43b5-9383-9fb8e39fb780","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b8b3123-5068-43b5-9383-9fb8e39fb780","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b8b3123-5068-43b5-9383-9fb8e39fb780","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9e5dfe7-80ed-48fa-a297-75fd6674f5db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32140","PortSpecifier":{"PortValue":32140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9e5dfe7-80ed-48fa-a297-75fd6674f5db","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9e5dfe7-80ed-48fa-a297-75fd6674f5db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32140","PortSpecifier":{"PortValue":32140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964093,"nanos":953556509},"http":{"id":"d9e5dfe7-80ed-48fa-a297-75fd6674f5db","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"d9e5dfe7-80ed-48fa-a297-75fd6674f5db","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d9e5dfe7-80ed-48fa-a297-75fd6674f5db","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9e5dfe7-80ed-48fa-a297-75fd6674f5db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9e5dfe7-80ed-48fa-a297-75fd6674f5db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9e5dfe7-80ed-48fa-a297-75fd6674f5db","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9e5dfe7-80ed-48fa-a297-75fd6674f5db","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9e5dfe7-80ed-48fa-a297-75fd6674f5db","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9e5dfe7-80ed-48fa-a297-75fd6674f5db","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cbdbea1-3476-45e8-a9b7-b366231633ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20104","PortSpecifier":{"PortValue":20104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7cbdbea1-3476-45e8-a9b7-b366231633ed","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cbdbea1-3476-45e8-a9b7-b366231633ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20104","PortSpecifier":{"PortValue":20104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964093,"nanos":988999043},"http":{"id":"7cbdbea1-3476-45e8-a9b7-b366231633ed","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7cbdbea1-3476-45e8-a9b7-b366231633ed","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UKtSA7XT17li4jSb_YmQY4UPWWtKMJG2ZSa5yhJgrAoUMZ0Up1UQPTkc68r2"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7cbdbea1-3476-45e8-a9b7-b366231633ed","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UKtSA7XT17li4jSb_YmQY4UPWWtKMJG2ZSa5yhJgrAoUMZ0Up1UQPTkc68r2\"}"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7cbdbea1-3476-45e8-a9b7-b366231633ed","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"7cbdbea1-3476-45e8-a9b7-b366231633ed","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7cbdbea1-3476-45e8-a9b7-b366231633ed","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"7cbdbea1-3476-45e8-a9b7-b366231633ed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cbdbea1-3476-45e8-a9b7-b366231633ed","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-06-09T00:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cbdbea1-3476-45e8-a9b7-b366231633ed","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"887c3015-eeb7-4abb-9d01-788f06c0ad24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42294","PortSpecifier":{"PortValue":42294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"887c3015-eeb7-4abb-9d01-788f06c0ad24","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"887c3015-eeb7-4abb-9d01-788f06c0ad24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42294","PortSpecifier":{"PortValue":42294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964094,"nanos":13820977},"http":{"id":"887c3015-eeb7-4abb-9d01-788f06c0ad24","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"887c3015-eeb7-4abb-9d01-788f06c0ad24","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nvSuQkg0ec5FqVqY_5VRN4VRfQ9oFakrvPhreaFcOtXSaGecwwEUtiu5J2JC"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"887c3015-eeb7-4abb-9d01-788f06c0ad24","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nvSuQkg0ec5FqVqY_5VRN4VRfQ9oFakrvPhreaFcOtXSaGecwwEUtiu5J2JC\"}"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"887c3015-eeb7-4abb-9d01-788f06c0ad24","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"887c3015-eeb7-4abb-9d01-788f06c0ad24","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"887c3015-eeb7-4abb-9d01-788f06c0ad24","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"887c3015-eeb7-4abb-9d01-788f06c0ad24","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"887c3015-eeb7-4abb-9d01-788f06c0ad24","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"887c3015-eeb7-4abb-9d01-788f06c0ad24","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"887c3015-eeb7-4abb-9d01-788f06c0ad24","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"887c3015-eeb7-4abb-9d01-788f06c0ad24","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"887c3015-eeb7-4abb-9d01-788f06c0ad24","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"887c3015-eeb7-4abb-9d01-788f06c0ad24","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fe677800-a07c-4e29-a5f7-9ec9ec2133a2","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"887c3015-eeb7-4abb-9d01-788f06c0ad24","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"887c3015-eeb7-4abb-9d01-788f06c0ad24","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb51915d-da92-4e34-9bf1-20e6c520e351","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14626","PortSpecifier":{"PortValue":14626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb51915d-da92-4e34-9bf1-20e6c520e351","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb51915d-da92-4e34-9bf1-20e6c520e351","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14626","PortSpecifier":{"PortValue":14626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964094,"nanos":49426999},"http":{"id":"fb51915d-da92-4e34-9bf1-20e6c520e351","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"fb51915d-da92-4e34-9bf1-20e6c520e351","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fb51915d-da92-4e34-9bf1-20e6c520e351","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb51915d-da92-4e34-9bf1-20e6c520e351","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb51915d-da92-4e34-9bf1-20e6c520e351","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb51915d-da92-4e34-9bf1-20e6c520e351","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb51915d-da92-4e34-9bf1-20e6c520e351","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb51915d-da92-4e34-9bf1-20e6c520e351","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb51915d-da92-4e34-9bf1-20e6c520e351","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b02ff64d-0d9e-4f97-81b7-0c6e7d7c2305","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20120","PortSpecifier":{"PortValue":20120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b02ff64d-0d9e-4f97-81b7-0c6e7d7c2305","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b02ff64d-0d9e-4f97-81b7-0c6e7d7c2305","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20120","PortSpecifier":{"PortValue":20120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964094,"nanos":85612009},"http":{"id":"b02ff64d-0d9e-4f97-81b7-0c6e7d7c2305","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"b02ff64d-0d9e-4f97-81b7-0c6e7d7c2305","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b02ff64d-0d9e-4f97-81b7-0c6e7d7c2305","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b02ff64d-0d9e-4f97-81b7-0c6e7d7c2305","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b02ff64d-0d9e-4f97-81b7-0c6e7d7c2305","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b02ff64d-0d9e-4f97-81b7-0c6e7d7c2305","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b02ff64d-0d9e-4f97-81b7-0c6e7d7c2305","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b02ff64d-0d9e-4f97-81b7-0c6e7d7c2305","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b02ff64d-0d9e-4f97-81b7-0c6e7d7c2305","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1537e145-cbfd-45da-95ef-00cf1673e1ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42306","PortSpecifier":{"PortValue":42306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1537e145-cbfd-45da-95ef-00cf1673e1ef","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1537e145-cbfd-45da-95ef-00cf1673e1ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42306","PortSpecifier":{"PortValue":42306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964094,"nanos":119918056},"http":{"id":"1537e145-cbfd-45da-95ef-00cf1673e1ef","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"1537e145-cbfd-45da-95ef-00cf1673e1ef","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1537e145-cbfd-45da-95ef-00cf1673e1ef","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1537e145-cbfd-45da-95ef-00cf1673e1ef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1537e145-cbfd-45da-95ef-00cf1673e1ef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1537e145-cbfd-45da-95ef-00cf1673e1ef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1537e145-cbfd-45da-95ef-00cf1673e1ef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1537e145-cbfd-45da-95ef-00cf1673e1ef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1537e145-cbfd-45da-95ef-00cf1673e1ef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecd54d45-6ad7-4aeb-a3b6-f66c397abedf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14640","PortSpecifier":{"PortValue":14640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ecd54d45-6ad7-4aeb-a3b6-f66c397abedf","method":"DELETE","path":"/maas-api/v1/api-keys/a8735b57-1cf5-4006-8ffd-6fbd12220c2e","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecd54d45-6ad7-4aeb-a3b6-f66c397abedf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14640","PortSpecifier":{"PortValue":14640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964094,"nanos":153401304},"http":{"id":"ecd54d45-6ad7-4aeb-a3b6-f66c397abedf","method":"DELETE","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/a8735b57-1cf5-4006-8ffd-6fbd12220c2e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"ecd54d45-6ad7-4aeb-a3b6-f66c397abedf","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ecd54d45-6ad7-4aeb-a3b6-f66c397abedf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ecd54d45-6ad7-4aeb-a3b6-f66c397abedf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ecd54d45-6ad7-4aeb-a3b6-f66c397abedf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/a8735b57-1cf5-4006-8ffd-6fbd12220c2e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecd54d45-6ad7-4aeb-a3b6-f66c397abedf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecd54d45-6ad7-4aeb-a3b6-f66c397abedf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecd54d45-6ad7-4aeb-a3b6-f66c397abedf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecd54d45-6ad7-4aeb-a3b6-f66c397abedf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c06cf9c8-b052-49bd-b046-ef66ed6e5983","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20130","PortSpecifier":{"PortValue":20130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c06cf9c8-b052-49bd-b046-ef66ed6e5983","method":"DELETE","path":"/maas-api/v1/api-keys/58985a0b-a0e9-4ea1-b5eb-44fdf93e0a9f","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c06cf9c8-b052-49bd-b046-ef66ed6e5983","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20130","PortSpecifier":{"PortValue":20130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964094,"nanos":189523515},"http":{"id":"c06cf9c8-b052-49bd-b046-ef66ed6e5983","method":"DELETE","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/58985a0b-a0e9-4ea1-b5eb-44fdf93e0a9f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c06cf9c8-b052-49bd-b046-ef66ed6e5983","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c06cf9c8-b052-49bd-b046-ef66ed6e5983","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c06cf9c8-b052-49bd-b046-ef66ed6e5983","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c06cf9c8-b052-49bd-b046-ef66ed6e5983","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/58985a0b-a0e9-4ea1-b5eb-44fdf93e0a9f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c06cf9c8-b052-49bd-b046-ef66ed6e5983","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c06cf9c8-b052-49bd-b046-ef66ed6e5983","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c06cf9c8-b052-49bd-b046-ef66ed6e5983","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c06cf9c8-b052-49bd-b046-ef66ed6e5983","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82baa80e-2eec-4390-9d26-3ae2273a652c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46210","PortSpecifier":{"PortValue":46210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82baa80e-2eec-4390-9d26-3ae2273a652c","method":"DELETE","path":"/maas-api/v1/api-keys/d1c58519-b286-4c5a-aa59-b51e299df8e3","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82baa80e-2eec-4390-9d26-3ae2273a652c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46210","PortSpecifier":{"PortValue":46210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964094,"nanos":225829537},"http":{"id":"82baa80e-2eec-4390-9d26-3ae2273a652c","method":"DELETE","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/d1c58519-b286-4c5a-aa59-b51e299df8e3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"82baa80e-2eec-4390-9d26-3ae2273a652c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"82baa80e-2eec-4390-9d26-3ae2273a652c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82baa80e-2eec-4390-9d26-3ae2273a652c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82baa80e-2eec-4390-9d26-3ae2273a652c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/d1c58519-b286-4c5a-aa59-b51e299df8e3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82baa80e-2eec-4390-9d26-3ae2273a652c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82baa80e-2eec-4390-9d26-3ae2273a652c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82baa80e-2eec-4390-9d26-3ae2273a652c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82baa80e-2eec-4390-9d26-3ae2273a652c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a52eac18-b398-474c-9328-8c1b0b1550bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36852","PortSpecifier":{"PortValue":36852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a52eac18-b398-474c-9328-8c1b0b1550bb","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a52eac18-b398-474c-9328-8c1b0b1550bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36852","PortSpecifier":{"PortValue":36852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964094,"nanos":261937955},"http":{"id":"a52eac18-b398-474c-9328-8c1b0b1550bb","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"a52eac18-b398-474c-9328-8c1b0b1550bb","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a52eac18-b398-474c-9328-8c1b0b1550bb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a52eac18-b398-474c-9328-8c1b0b1550bb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a52eac18-b398-474c-9328-8c1b0b1550bb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a52eac18-b398-474c-9328-8c1b0b1550bb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a52eac18-b398-474c-9328-8c1b0b1550bb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a52eac18-b398-474c-9328-8c1b0b1550bb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a52eac18-b398-474c-9328-8c1b0b1550bb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bb11e95-1d75-4d02-baa3-afb90ab225eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32144","PortSpecifier":{"PortValue":32144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6bb11e95-1d75-4d02-baa3-afb90ab225eb","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bb11e95-1d75-4d02-baa3-afb90ab225eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32144","PortSpecifier":{"PortValue":32144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964094,"nanos":297668838},"http":{"id":"6bb11e95-1d75-4d02-baa3-afb90ab225eb","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"6bb11e95-1d75-4d02-baa3-afb90ab225eb","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6bb11e95-1d75-4d02-baa3-afb90ab225eb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6bb11e95-1d75-4d02-baa3-afb90ab225eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6bb11e95-1d75-4d02-baa3-afb90ab225eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bb11e95-1d75-4d02-baa3-afb90ab225eb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bb11e95-1d75-4d02-baa3-afb90ab225eb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bb11e95-1d75-4d02-baa3-afb90ab225eb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bb11e95-1d75-4d02-baa3-afb90ab225eb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77f62b87-c93d-4a5d-89a6-b3f1bd4cd8bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46212","PortSpecifier":{"PortValue":46212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77f62b87-c93d-4a5d-89a6-b3f1bd4cd8bc","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77f62b87-c93d-4a5d-89a6-b3f1bd4cd8bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46212","PortSpecifier":{"PortValue":46212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964094,"nanos":335532840},"http":{"id":"77f62b87-c93d-4a5d-89a6-b3f1bd4cd8bc","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"77f62b87-c93d-4a5d-89a6-b3f1bd4cd8bc","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"77f62b87-c93d-4a5d-89a6-b3f1bd4cd8bc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77f62b87-c93d-4a5d-89a6-b3f1bd4cd8bc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77f62b87-c93d-4a5d-89a6-b3f1bd4cd8bc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77f62b87-c93d-4a5d-89a6-b3f1bd4cd8bc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77f62b87-c93d-4a5d-89a6-b3f1bd4cd8bc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77f62b87-c93d-4a5d-89a6-b3f1bd4cd8bc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77f62b87-c93d-4a5d-89a6-b3f1bd4cd8bc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"851d9952-e0aa-4ca5-9563-fa8f3a499114","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36866","PortSpecifier":{"PortValue":36866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"851d9952-e0aa-4ca5-9563-fa8f3a499114","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"851d9952-e0aa-4ca5-9563-fa8f3a499114","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36866","PortSpecifier":{"PortValue":36866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964094,"nanos":369001279},"http":{"id":"851d9952-e0aa-4ca5-9563-fa8f3a499114","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"851d9952-e0aa-4ca5-9563-fa8f3a499114","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mEzsk72mNJl1155D_VO37Rt0ym2YeXbmgS2Z1RiNZzPbuURu3GA8wgn2J1bK"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"851d9952-e0aa-4ca5-9563-fa8f3a499114","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mEzsk72mNJl1155D_VO37Rt0ym2YeXbmgS2Z1RiNZzPbuURu3GA8wgn2J1bK\"}"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"851d9952-e0aa-4ca5-9563-fa8f3a499114","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"851d9952-e0aa-4ca5-9563-fa8f3a499114","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"851d9952-e0aa-4ca5-9563-fa8f3a499114","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"851d9952-e0aa-4ca5-9563-fa8f3a499114","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"851d9952-e0aa-4ca5-9563-fa8f3a499114","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"851d9952-e0aa-4ca5-9563-fa8f3a499114","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"851d9952-e0aa-4ca5-9563-fa8f3a499114","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"851d9952-e0aa-4ca5-9563-fa8f3a499114","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"851d9952-e0aa-4ca5-9563-fa8f3a499114","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"851d9952-e0aa-4ca5-9563-fa8f3a499114","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"78be70f5-ec40-4827-8ea8-e5dd310bc29f","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"851d9952-e0aa-4ca5-9563-fa8f3a499114","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"851d9952-e0aa-4ca5-9563-fa8f3a499114","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfd86c32-1fec-479b-9007-acfdf8a9cbe0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32150","PortSpecifier":{"PortValue":32150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cfd86c32-1fec-479b-9007-acfdf8a9cbe0","method":"DELETE","path":"/maas-api/v1/api-keys/78be70f5-ec40-4827-8ea8-e5dd310bc29f","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfd86c32-1fec-479b-9007-acfdf8a9cbe0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32150","PortSpecifier":{"PortValue":32150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964094,"nanos":396785396},"http":{"id":"cfd86c32-1fec-479b-9007-acfdf8a9cbe0","method":"DELETE","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/78be70f5-ec40-4827-8ea8-e5dd310bc29f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"cfd86c32-1fec-479b-9007-acfdf8a9cbe0","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cfd86c32-1fec-479b-9007-acfdf8a9cbe0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cfd86c32-1fec-479b-9007-acfdf8a9cbe0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cfd86c32-1fec-479b-9007-acfdf8a9cbe0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/78be70f5-ec40-4827-8ea8-e5dd310bc29f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfd86c32-1fec-479b-9007-acfdf8a9cbe0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfd86c32-1fec-479b-9007-acfdf8a9cbe0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfd86c32-1fec-479b-9007-acfdf8a9cbe0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfd86c32-1fec-479b-9007-acfdf8a9cbe0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"818452c6-a440-463b-869b-4b192deff8b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42320","PortSpecifier":{"PortValue":42320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"818452c6-a440-463b-869b-4b192deff8b2","method":"DELETE","path":"/maas-api/v1/api-keys/973ce99d-4639-45d6-9f48-2e9062901f61","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"818452c6-a440-463b-869b-4b192deff8b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42320","PortSpecifier":{"PortValue":42320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964094,"nanos":432592427},"http":{"id":"818452c6-a440-463b-869b-4b192deff8b2","method":"DELETE","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/973ce99d-4639-45d6-9f48-2e9062901f61",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"818452c6-a440-463b-869b-4b192deff8b2","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"818452c6-a440-463b-869b-4b192deff8b2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"818452c6-a440-463b-869b-4b192deff8b2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"818452c6-a440-463b-869b-4b192deff8b2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/973ce99d-4639-45d6-9f48-2e9062901f61",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"818452c6-a440-463b-869b-4b192deff8b2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"818452c6-a440-463b-869b-4b192deff8b2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"818452c6-a440-463b-869b-4b192deff8b2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"818452c6-a440-463b-869b-4b192deff8b2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b0ac6b5-2549-403b-aae5-8b2fa002b7d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46214","PortSpecifier":{"PortValue":46214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b0ac6b5-2549-403b-aae5-8b2fa002b7d9","method":"DELETE","path":"/maas-api/v1/api-keys/0e4cabfd-33a1-47c1-a358-159aaa982b4a","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b0ac6b5-2549-403b-aae5-8b2fa002b7d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46214","PortSpecifier":{"PortValue":46214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964094,"nanos":466559981},"http":{"id":"0b0ac6b5-2549-403b-aae5-8b2fa002b7d9","method":"DELETE","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/0e4cabfd-33a1-47c1-a358-159aaa982b4a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"0b0ac6b5-2549-403b-aae5-8b2fa002b7d9","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0b0ac6b5-2549-403b-aae5-8b2fa002b7d9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b0ac6b5-2549-403b-aae5-8b2fa002b7d9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b0ac6b5-2549-403b-aae5-8b2fa002b7d9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/0e4cabfd-33a1-47c1-a358-159aaa982b4a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b0ac6b5-2549-403b-aae5-8b2fa002b7d9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b0ac6b5-2549-403b-aae5-8b2fa002b7d9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b0ac6b5-2549-403b-aae5-8b2fa002b7d9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b0ac6b5-2549-403b-aae5-8b2fa002b7d9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c3393eb-a68e-47e9-8f1f-73c20f0f8723","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14648","PortSpecifier":{"PortValue":14648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c3393eb-a68e-47e9-8f1f-73c20f0f8723","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c3393eb-a68e-47e9-8f1f-73c20f0f8723","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14648","PortSpecifier":{"PortValue":14648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964094,"nanos":501324996},"http":{"id":"1c3393eb-a68e-47e9-8f1f-73c20f0f8723","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c3393eb-a68e-47e9-8f1f-73c20f0f8723","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mEzsk72mNJl1155D_VO37Rt0ym2YeXbmgS2Z1RiNZzPbuURu3GA8wgn2J1bK"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1c3393eb-a68e-47e9-8f1f-73c20f0f8723","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mEzsk72mNJl1155D_VO37Rt0ym2YeXbmgS2Z1RiNZzPbuURu3GA8wgn2J1bK\"}"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1c3393eb-a68e-47e9-8f1f-73c20f0f8723","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"1c3393eb-a68e-47e9-8f1f-73c20f0f8723","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c3393eb-a68e-47e9-8f1f-73c20f0f8723","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"1c3393eb-a68e-47e9-8f1f-73c20f0f8723","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c3393eb-a68e-47e9-8f1f-73c20f0f8723","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c3393eb-a68e-47e9-8f1f-73c20f0f8723","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4cd2756-58c4-4b27-9f31-fc1c58dc692c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20144","PortSpecifier":{"PortValue":20144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b4cd2756-58c4-4b27-9f31-fc1c58dc692c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4cd2756-58c4-4b27-9f31-fc1c58dc692c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20144","PortSpecifier":{"PortValue":20144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964094,"nanos":523945116},"http":{"id":"b4cd2756-58c4-4b27-9f31-fc1c58dc692c","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b4cd2756-58c4-4b27-9f31-fc1c58dc692c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pcS5Kfmjr2y9gQ0E_IXMuVBRTwhjyzh2PPnsI4WE35mPisCidojwr6ohnk5I"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b4cd2756-58c4-4b27-9f31-fc1c58dc692c","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pcS5Kfmjr2y9gQ0E_IXMuVBRTwhjyzh2PPnsI4WE35mPisCidojwr6ohnk5I\"}"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b4cd2756-58c4-4b27-9f31-fc1c58dc692c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"b4cd2756-58c4-4b27-9f31-fc1c58dc692c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b4cd2756-58c4-4b27-9f31-fc1c58dc692c","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"b4cd2756-58c4-4b27-9f31-fc1c58dc692c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4cd2756-58c4-4b27-9f31-fc1c58dc692c","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4cd2756-58c4-4b27-9f31-fc1c58dc692c","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9084dd1-7b3b-48a5-b1fb-478eafe687c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36874","PortSpecifier":{"PortValue":36874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9084dd1-7b3b-48a5-b1fb-478eafe687c3","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9084dd1-7b3b-48a5-b1fb-478eafe687c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36874","PortSpecifier":{"PortValue":36874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964094,"nanos":547004341},"http":{"id":"b9084dd1-7b3b-48a5-b1fb-478eafe687c3","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9084dd1-7b3b-48a5-b1fb-478eafe687c3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DUgtWkjGA3GnCNvE_CVnoHbSTDb6Du9mIQbAk2PjQDVr4NDXmOpGPIV5d5pG"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b9084dd1-7b3b-48a5-b1fb-478eafe687c3","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DUgtWkjGA3GnCNvE_CVnoHbSTDb6Du9mIQbAk2PjQDVr4NDXmOpGPIV5d5pG\"}"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b9084dd1-7b3b-48a5-b1fb-478eafe687c3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"b9084dd1-7b3b-48a5-b1fb-478eafe687c3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9084dd1-7b3b-48a5-b1fb-478eafe687c3","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"b9084dd1-7b3b-48a5-b1fb-478eafe687c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9084dd1-7b3b-48a5-b1fb-478eafe687c3","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9084dd1-7b3b-48a5-b1fb-478eafe687c3","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9edbdec2-9cc7-4448-9918-64f40999efe3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32166","PortSpecifier":{"PortValue":32166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9edbdec2-9cc7-4448-9918-64f40999efe3","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9edbdec2-9cc7-4448-9918-64f40999efe3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32166","PortSpecifier":{"PortValue":32166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964094,"nanos":791963060},"http":{"id":"9edbdec2-9cc7-4448-9918-64f40999efe3","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"9edbdec2-9cc7-4448-9918-64f40999efe3","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9edbdec2-9cc7-4448-9918-64f40999efe3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9edbdec2-9cc7-4448-9918-64f40999efe3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9edbdec2-9cc7-4448-9918-64f40999efe3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9edbdec2-9cc7-4448-9918-64f40999efe3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9edbdec2-9cc7-4448-9918-64f40999efe3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9edbdec2-9cc7-4448-9918-64f40999efe3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9edbdec2-9cc7-4448-9918-64f40999efe3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16e050bf-63a2-4207-a61d-e283cf117931","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42336","PortSpecifier":{"PortValue":42336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16e050bf-63a2-4207-a61d-e283cf117931","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16e050bf-63a2-4207-a61d-e283cf117931","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42336","PortSpecifier":{"PortValue":42336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964094,"nanos":831488173},"http":{"id":"16e050bf-63a2-4207-a61d-e283cf117931","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"16e050bf-63a2-4207-a61d-e283cf117931","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"16e050bf-63a2-4207-a61d-e283cf117931","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16e050bf-63a2-4207-a61d-e283cf117931","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16e050bf-63a2-4207-a61d-e283cf117931","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16e050bf-63a2-4207-a61d-e283cf117931","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16e050bf-63a2-4207-a61d-e283cf117931","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16e050bf-63a2-4207-a61d-e283cf117931","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16e050bf-63a2-4207-a61d-e283cf117931","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85be1c33-e143-4418-a572-c7b8ef711ee4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14654","PortSpecifier":{"PortValue":14654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85be1c33-e143-4418-a572-c7b8ef711ee4","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85be1c33-e143-4418-a572-c7b8ef711ee4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14654","PortSpecifier":{"PortValue":14654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964094,"nanos":885434783},"http":{"id":"85be1c33-e143-4418-a572-c7b8ef711ee4","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"85be1c33-e143-4418-a572-c7b8ef711ee4","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"85be1c33-e143-4418-a572-c7b8ef711ee4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85be1c33-e143-4418-a572-c7b8ef711ee4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85be1c33-e143-4418-a572-c7b8ef711ee4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85be1c33-e143-4418-a572-c7b8ef711ee4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85be1c33-e143-4418-a572-c7b8ef711ee4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85be1c33-e143-4418-a572-c7b8ef711ee4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85be1c33-e143-4418-a572-c7b8ef711ee4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5400a984-2c85-4ef9-b00c-0a37bfb1b816","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20146","PortSpecifier":{"PortValue":20146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5400a984-2c85-4ef9-b00c-0a37bfb1b816","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5400a984-2c85-4ef9-b00c-0a37bfb1b816","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20146","PortSpecifier":{"PortValue":20146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964094,"nanos":925560004},"http":{"id":"5400a984-2c85-4ef9-b00c-0a37bfb1b816","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"5400a984-2c85-4ef9-b00c-0a37bfb1b816","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5400a984-2c85-4ef9-b00c-0a37bfb1b816","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5400a984-2c85-4ef9-b00c-0a37bfb1b816","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5400a984-2c85-4ef9-b00c-0a37bfb1b816","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5400a984-2c85-4ef9-b00c-0a37bfb1b816","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5400a984-2c85-4ef9-b00c-0a37bfb1b816","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5400a984-2c85-4ef9-b00c-0a37bfb1b816","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5400a984-2c85-4ef9-b00c-0a37bfb1b816","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:14:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08ab9f31-bb0d-472c-9d14-5f50b0f28ba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46230","PortSpecifier":{"PortValue":46230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08ab9f31-bb0d-472c-9d14-5f50b0f28ba6","method":"GET","path":"/maas-api/v1/api-keys/f21dcf10-6b69-42ed-aedf-eb483c0616db","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08ab9f31-bb0d-472c-9d14-5f50b0f28ba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46230","PortSpecifier":{"PortValue":46230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964095,"nanos":389508197},"http":{"id":"08ab9f31-bb0d-472c-9d14-5f50b0f28ba6","method":"GET","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f21dcf10-6b69-42ed-aedf-eb483c0616db",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"08ab9f31-bb0d-472c-9d14-5f50b0f28ba6","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"08ab9f31-bb0d-472c-9d14-5f50b0f28ba6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08ab9f31-bb0d-472c-9d14-5f50b0f28ba6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08ab9f31-bb0d-472c-9d14-5f50b0f28ba6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f21dcf10-6b69-42ed-aedf-eb483c0616db",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08ab9f31-bb0d-472c-9d14-5f50b0f28ba6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:14:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08ab9f31-bb0d-472c-9d14-5f50b0f28ba6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08ab9f31-bb0d-472c-9d14-5f50b0f28ba6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08ab9f31-bb0d-472c-9d14-5f50b0f28ba6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"error","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:14:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dac06e6-73d9-4950-8bac-38cad1c822ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36888","PortSpecifier":{"PortValue":36888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3dac06e6-73d9-4950-8bac-38cad1c822ea","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:14:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dac06e6-73d9-4950-8bac-38cad1c822ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:36888","PortSpecifier":{"PortValue":36888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964098,"nanos":202811332},"http":{"id":"3dac06e6-73d9-4950-8bac-38cad1c822ea","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"3dac06e6-73d9-4950-8bac-38cad1c822ea","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:14:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3dac06e6-73d9-4950-8bac-38cad1c822ea","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:14:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3dac06e6-73d9-4950-8bac-38cad1c822ea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-apikey-active-sa","uid":"e886f220-e9c5-402e-be9a-3e7aedae2f3c","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f0f2d6d5-bf1e-4532-b80a-ae3b497b8fe9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3dac06e6-73d9-4950-8bac-38cad1c822ea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f0f2d6d5-bf1e-4532-b80a-ae3b497b8fe9"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"e886f220-e9c5-402e-be9a-3e7aedae2f3c","username":"system:serviceaccount:llm:e2e-apikey-active-sa"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dac06e6-73d9-4950-8bac-38cad1c822ea","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-apikey-active-sa"} {"level":"debug","ts":"2026-06-09T00:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dac06e6-73d9-4950-8bac-38cad1c822ea","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:14:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dac06e6-73d9-4950-8bac-38cad1c822ea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:14:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dac06e6-73d9-4950-8bac-38cad1c822ea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"error","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"error","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:15:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8071c871-39b3-4db8-91f3-b5d2b7ec7bc1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15186","PortSpecifier":{"PortValue":15186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8071c871-39b3-4db8-91f3-b5d2b7ec7bc1","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:15:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8071c871-39b3-4db8-91f3-b5d2b7ec7bc1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15186","PortSpecifier":{"PortValue":15186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964117,"nanos":361665255},"http":{"id":"8071c871-39b3-4db8-91f3-b5d2b7ec7bc1","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:15:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"8071c871-39b3-4db8-91f3-b5d2b7ec7bc1","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:15:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8071c871-39b3-4db8-91f3-b5d2b7ec7bc1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:15:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8071c871-39b3-4db8-91f3-b5d2b7ec7bc1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-apikey-degraded-sa","uid":"5b996a9e-a9a2-4b14-8eb3-95febc0c22a5","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6883094d-6a5d-4dd9-a164-eb8781e5d4fe"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8071c871-39b3-4db8-91f3-b5d2b7ec7bc1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6883094d-6a5d-4dd9-a164-eb8781e5d4fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"5b996a9e-a9a2-4b14-8eb3-95febc0c22a5","username":"system:serviceaccount:llm:e2e-apikey-degraded-sa"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8071c871-39b3-4db8-91f3-b5d2b7ec7bc1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-apikey-degraded-sa"} {"level":"debug","ts":"2026-06-09T00:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8071c871-39b3-4db8-91f3-b5d2b7ec7bc1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:15:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8071c871-39b3-4db8-91f3-b5d2b7ec7bc1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:15:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8071c871-39b3-4db8-91f3-b5d2b7ec7bc1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:15:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"551a1df3-775e-46e1-81a6-a23f84dd7e7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:44056","PortSpecifier":{"PortValue":44056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"551a1df3-775e-46e1-81a6-a23f84dd7e7b","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:15:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"551a1df3-775e-46e1-81a6-a23f84dd7e7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:44056","PortSpecifier":{"PortValue":44056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964136,"nanos":748398654},"http":{"id":"551a1df3-775e-46e1-81a6-a23f84dd7e7b","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:15:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"551a1df3-775e-46e1-81a6-a23f84dd7e7b","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:15:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"551a1df3-775e-46e1-81a6-a23f84dd7e7b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:15:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"551a1df3-775e-46e1-81a6-a23f84dd7e7b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-apikey-failed-sa","uid":"cbab281f-890f-40c5-b503-b673c7f40587","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0616125-91ac-4706-babd-f0c66f8f68b2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"551a1df3-775e-46e1-81a6-a23f84dd7e7b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0616125-91ac-4706-babd-f0c66f8f68b2"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"cbab281f-890f-40c5-b503-b673c7f40587","username":"system:serviceaccount:llm:e2e-apikey-failed-sa"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"551a1df3-775e-46e1-81a6-a23f84dd7e7b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-apikey-failed-sa"} {"level":"debug","ts":"2026-06-09T00:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"551a1df3-775e-46e1-81a6-a23f84dd7e7b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:15:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"551a1df3-775e-46e1-81a6-a23f84dd7e7b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:15:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"551a1df3-775e-46e1-81a6-a23f84dd7e7b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:15:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89b26cac-6c1c-4f04-b9a2-ac1199041011","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:40986","PortSpecifier":{"PortValue":40986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89b26cac-6c1c-4f04-b9a2-ac1199041011","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:15:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89b26cac-6c1c-4f04-b9a2-ac1199041011","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:40986","PortSpecifier":{"PortValue":40986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964156,"nanos":57536918},"http":{"id":"89b26cac-6c1c-4f04-b9a2-ac1199041011","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:15:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"89b26cac-6c1c-4f04-b9a2-ac1199041011","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:15:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"89b26cac-6c1c-4f04-b9a2-ac1199041011","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:15:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89b26cac-6c1c-4f04-b9a2-ac1199041011","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-apikey-pending-sa","uid":"bbb1a796-d366-430a-bda6-6410c8193090","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa60f450-81bb-4756-9e75-c6f3da08458d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:15:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89b26cac-6c1c-4f04-b9a2-ac1199041011","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa60f450-81bb-4756-9e75-c6f3da08458d"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"bbb1a796-d366-430a-bda6-6410c8193090","username":"system:serviceaccount:llm:e2e-apikey-pending-sa"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:15:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89b26cac-6c1c-4f04-b9a2-ac1199041011","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-apikey-pending-sa"} {"level":"debug","ts":"2026-06-09T00:15:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89b26cac-6c1c-4f04-b9a2-ac1199041011","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:15:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89b26cac-6c1c-4f04-b9a2-ac1199041011","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:15:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89b26cac-6c1c-4f04-b9a2-ac1199041011","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:15:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:15:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:15:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:16:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe7729d3-a258-45f5-905f-1f3ef17c7276","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20008","PortSpecifier":{"PortValue":20008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe7729d3-a258-45f5-905f-1f3ef17c7276","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:16:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe7729d3-a258-45f5-905f-1f3ef17c7276","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20008","PortSpecifier":{"PortValue":20008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964166,"nanos":349183660},"http":{"id":"fe7729d3-a258-45f5-905f-1f3ef17c7276","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:16:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"fe7729d3-a258-45f5-905f-1f3ef17c7276","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:16:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe7729d3-a258-45f5-905f-1f3ef17c7276","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:16:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe7729d3-a258-45f5-905f-1f3ef17c7276","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-apikey-unreconciled-sa","uid":"bcb3225a-6d0f-4dc9-a587-b15396782be5","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6363a502-42b2-4220-9bcf-eb23c3d5b9ff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:16:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe7729d3-a258-45f5-905f-1f3ef17c7276","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6363a502-42b2-4220-9bcf-eb23c3d5b9ff"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"bcb3225a-6d0f-4dc9-a587-b15396782be5","username":"system:serviceaccount:llm:e2e-apikey-unreconciled-sa"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:16:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe7729d3-a258-45f5-905f-1f3ef17c7276","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-apikey-unreconciled-sa"} {"level":"debug","ts":"2026-06-09T00:16:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe7729d3-a258-45f5-905f-1f3ef17c7276","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:16:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe7729d3-a258-45f5-905f-1f3ef17c7276","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:16:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe7729d3-a258-45f5-905f-1f3ef17c7276","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:16:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50f4b4ae-4677-4433-b47c-ba1b4bdc8693","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54608","PortSpecifier":{"PortValue":54608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50f4b4ae-4677-4433-b47c-ba1b4bdc8693","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:16:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50f4b4ae-4677-4433-b47c-ba1b4bdc8693","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54608","PortSpecifier":{"PortValue":54608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964188,"nanos":339816682},"http":{"id":"50f4b4ae-4677-4433-b47c-ba1b4bdc8693","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:16:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"50f4b4ae-4677-4433-b47c-ba1b4bdc8693","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:16:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"50f4b4ae-4677-4433-b47c-ba1b4bdc8693","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:16:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50f4b4ae-4677-4433-b47c-ba1b4bdc8693","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-filter-sa-6f156309","uid":"8538d71a-1f4f-443c-800e-d7e96774886a","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bad165f5-c81e-4619-893c-fa625f02e936"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:16:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50f4b4ae-4677-4433-b47c-ba1b4bdc8693","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bad165f5-c81e-4619-893c-fa625f02e936"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"8538d71a-1f4f-443c-800e-d7e96774886a","username":"system:serviceaccount:llm:e2e-filter-sa-6f156309"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:16:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50f4b4ae-4677-4433-b47c-ba1b4bdc8693","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-filter-sa-6f156309"} {"level":"debug","ts":"2026-06-09T00:16:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50f4b4ae-4677-4433-b47c-ba1b4bdc8693","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:16:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50f4b4ae-4677-4433-b47c-ba1b4bdc8693","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:16:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50f4b4ae-4677-4433-b47c-ba1b4bdc8693","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-09T00:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T00:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:16:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:16:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:16:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:16:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:16:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:16:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:16:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:16:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:16:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:16:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:16:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:16:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:16:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:16:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:16:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:16:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:15:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:15:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"error","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:16:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:16:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"info","ts":"2026-06-09T00:16:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24f50be6-9b5d-4ec9-9e90-606661ca95c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:57124","PortSpecifier":{"PortValue":57124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24f50be6-9b5d-4ec9-9e90-606661ca95c4","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:16:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24f50be6-9b5d-4ec9-9e90-606661ca95c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:57124","PortSpecifier":{"PortValue":57124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964197,"nanos":424836327},"http":{"id":"24f50be6-9b5d-4ec9-9e90-606661ca95c4","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:16:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"24f50be6-9b5d-4ec9-9e90-606661ca95c4","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:16:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"24f50be6-9b5d-4ec9-9e90-606661ca95c4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:16:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24f50be6-9b5d-4ec9-9e90-606661ca95c4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24f50be6-9b5d-4ec9-9e90-606661ca95c4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24f50be6-9b5d-4ec9-9e90-606661ca95c4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24f50be6-9b5d-4ec9-9e90-606661ca95c4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:16:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24f50be6-9b5d-4ec9-9e90-606661ca95c4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:16:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24f50be6-9b5d-4ec9-9e90-606661ca95c4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:16:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21d31810-5cb5-487d-9f14-c1945b35f75e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:40822","PortSpecifier":{"PortValue":40822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21d31810-5cb5-487d-9f14-c1945b35f75e","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:16:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21d31810-5cb5-487d-9f14-c1945b35f75e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:40822","PortSpecifier":{"PortValue":40822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964197,"nanos":478628205},"http":{"id":"21d31810-5cb5-487d-9f14-c1945b35f75e","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:16:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"21d31810-5cb5-487d-9f14-c1945b35f75e","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:16:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"21d31810-5cb5-487d-9f14-c1945b35f75e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:16:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21d31810-5cb5-487d-9f14-c1945b35f75e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21d31810-5cb5-487d-9f14-c1945b35f75e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21d31810-5cb5-487d-9f14-c1945b35f75e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21d31810-5cb5-487d-9f14-c1945b35f75e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:16:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21d31810-5cb5-487d-9f14-c1945b35f75e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:16:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21d31810-5cb5-487d-9f14-c1945b35f75e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"} {"level":"debug","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:17:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:17:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"} {"level":"debug","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:17:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:17:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"} {"level":"debug","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fb4abcc3b7791a714f5b1e0e803fc9c11139064f13a5928ca297d477bbfe93f"} {"level":"debug","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fb4abcc3b7791a714f5b1e0e803fc9c11139064f13a5928ca297d477bbfe93f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:17:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:17:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fb4abcc3b7791a714f5b1e0e803fc9c11139064f13a5928ca297d477bbfe93f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fb4abcc3b7791a714f5b1e0e803fc9c11139064f13a5928ca297d477bbfe93f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:17:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:17:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fb4abcc3b7791a714f5b1e0e803fc9c11139064f13a5928ca297d477bbfe93f"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fb4abcc3b7791a714f5b1e0e803fc9c11139064f13a5928ca297d477bbfe93f"} {"level":"info","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce2ed8d70fe734ee50c220ab5f3503cbe5e3f3135d406260c8eca3394e390c3e"} {"level":"info","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fb4abcc3b7791a714f5b1e0e803fc9c11139064f13a5928ca297d477bbfe93f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce2ed8d70fe734ee50c220ab5f3503cbe5e3f3135d406260c8eca3394e390c3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:17:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:17:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce2ed8d70fe734ee50c220ab5f3503cbe5e3f3135d406260c8eca3394e390c3e"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fb4abcc3b7791a714f5b1e0e803fc9c11139064f13a5928ca297d477bbfe93f"} {"level":"info","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"} {"level":"info","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce2ed8d70fe734ee50c220ab5f3503cbe5e3f3135d406260c8eca3394e390c3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fb4abcc3b7791a714f5b1e0e803fc9c11139064f13a5928ca297d477bbfe93f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce2ed8d70fe734ee50c220ab5f3503cbe5e3f3135d406260c8eca3394e390c3e"} {"level":"debug","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:17:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:17:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce2ed8d70fe734ee50c220ab5f3503cbe5e3f3135d406260c8eca3394e390c3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:17:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:17:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"} {"level":"info","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:17:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:17:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"} {"level":"info","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:17:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:17:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"} {"level":"error","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:17:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fb4abcc3b7791a714f5b1e0e803fc9c11139064f13a5928ca297d477bbfe93f"} {"level":"info","ts":"2026-06-09T00:17:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce2ed8d70fe734ee50c220ab5f3503cbe5e3f3135d406260c8eca3394e390c3e"} {"level":"info","ts":"2026-06-09T00:17:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"} {"level":"info","ts":"2026-06-09T00:17:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"} {"level":"debug","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:18:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:18:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"} {"level":"debug","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:18:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:18:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:18:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:18:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:18:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:18:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"} {"level":"debug","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:18:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:18:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4e9f9ac92142476594fcf396f3060036333bc81486f565c714ebe03adf2cb14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:18:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:18:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4e9f9ac92142476594fcf396f3060036333bc81486f565c714ebe03adf2cb14"} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee01239b53be0c6cd7202b853d8e642f52c7695c3c728a88f69398e540e0c139"} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4e9f9ac92142476594fcf396f3060036333bc81486f565c714ebe03adf2cb14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4e9f9ac92142476594fcf396f3060036333bc81486f565c714ebe03adf2cb14"} {"level":"debug","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee01239b53be0c6cd7202b853d8e642f52c7695c3c728a88f69398e540e0c139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:18:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:18:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee01239b53be0c6cd7202b853d8e642f52c7695c3c728a88f69398e540e0c139"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee01239b53be0c6cd7202b853d8e642f52c7695c3c728a88f69398e540e0c139","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4e9f9ac92142476594fcf396f3060036333bc81486f565c714ebe03adf2cb14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:18:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:18:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4e9f9ac92142476594fcf396f3060036333bc81486f565c714ebe03adf2cb14"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee01239b53be0c6cd7202b853d8e642f52c7695c3c728a88f69398e540e0c139"} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4e9f9ac92142476594fcf396f3060036333bc81486f565c714ebe03adf2cb14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee01239b53be0c6cd7202b853d8e642f52c7695c3c728a88f69398e540e0c139","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4e9f9ac92142476594fcf396f3060036333bc81486f565c714ebe03adf2cb14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T00:18:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T00:18:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4e9f9ac92142476594fcf396f3060036333bc81486f565c714ebe03adf2cb14"} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4e9f9ac92142476594fcf396f3060036333bc81486f565c714ebe03adf2cb14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4e9f9ac92142476594fcf396f3060036333bc81486f565c714ebe03adf2cb14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T00:18:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T00:18:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4e9f9ac92142476594fcf396f3060036333bc81486f565c714ebe03adf2cb14"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4e9f9ac92142476594fcf396f3060036333bc81486f565c714ebe03adf2cb14"} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4e9f9ac92142476594fcf396f3060036333bc81486f565c714ebe03adf2cb14"} {"level":"info","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4e9f9ac92142476594fcf396f3060036333bc81486f565c714ebe03adf2cb14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-09T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4e9f9ac92142476594fcf396f3060036333bc81486f565c714ebe03adf2cb14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-09T00:18:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4e9f9ac92142476594fcf396f3060036333bc81486f565c714ebe03adf2cb14"} {"level":"info","ts":"2026-06-09T00:18:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"} {"level":"info","ts":"2026-06-09T00:18:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"} {"level":"info","ts":"2026-06-09T00:18:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee01239b53be0c6cd7202b853d8e642f52c7695c3c728a88f69398e540e0c139"} {"level":"info","ts":"2026-06-09T00:18:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d1763b5-0dd6-4442-a1f1-908aa28bf1ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:60080","PortSpecifier":{"PortValue":60080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d1763b5-0dd6-4442-a1f1-908aa28bf1ba","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-09T00:18:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d1763b5-0dd6-4442-a1f1-908aa28bf1ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:60080","PortSpecifier":{"PortValue":60080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780964312,"nanos":795305291},"http":{"id":"1d1763b5-0dd6-4442-a1f1-908aa28bf1ba","method":"POST","headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:18:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"1d1763b5-0dd6-4442-a1f1-908aa28bf1ba","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-09T00:18:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1d1763b5-0dd6-4442-a1f1-908aa28bf1ba","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-09T00:18:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d1763b5-0dd6-4442-a1f1-908aa28bf1ba","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"]}} {"level":"debug","ts":"2026-06-09T00:18:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d1763b5-0dd6-4442-a1f1-908aa28bf1ba","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/658967c15186"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=faae3c45-8397-4541-b551-995f28253457"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"299636ce-0bab-4b33-bd64-15386de9cfaf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.54a17485-d670-447e-b26c-658967c15186.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-09T00:18:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d1763b5-0dd6-4442-a1f1-908aa28bf1ba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-06-09T00:18:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d1763b5-0dd6-4442-a1f1-908aa28bf1ba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-06-09T00:18:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d1763b5-0dd6-4442-a1f1-908aa28bf1ba","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-09T00:18:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d1763b5-0dd6-4442-a1f1-908aa28bf1ba","authorized":true,"response":"OK"}