{"level":"debug","ts":"2026-06-09T02:56:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T02:56:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T02:56:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:56:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T02:56:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"debug","ts":"2026-06-09T02:56:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"debug","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"debug","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"debug","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"error","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T02:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-09T02:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T02:56:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T02:56:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T02:56:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T02:56:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T02:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-09T02:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T02:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-09T02:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T02:56:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T02:56:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T02:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"039df2ab-12bd-44ad-9b99-532e68f5a92b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:22108","PortSpecifier":{"PortValue":22108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"039df2ab-12bd-44ad-9b99-532e68f5a92b","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"039df2ab-12bd-44ad-9b99-532e68f5a92b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:22108","PortSpecifier":{"PortValue":22108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973788,"nanos":294836900},"http":{"id":"039df2ab-12bd-44ad-9b99-532e68f5a92b","method":"POST","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"039df2ab-12bd-44ad-9b99-532e68f5a92b","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"039df2ab-12bd-44ad-9b99-532e68f5a92b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"039df2ab-12bd-44ad-9b99-532e68f5a92b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2104195c-1d4d-4447-ac49-dd056692a6a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=702d6b9b-fd95-4939-9249-2be5bcae89e4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ab80234702e7"]}}
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"039df2ab-12bd-44ad-9b99-532e68f5a92b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ab80234702e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=702d6b9b-fd95-4939-9249-2be5bcae89e4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2104195c-1d4d-4447-ac49-dd056692a6a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"039df2ab-12bd-44ad-9b99-532e68f5a92b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"039df2ab-12bd-44ad-9b99-532e68f5a92b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"039df2ab-12bd-44ad-9b99-532e68f5a92b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"039df2ab-12bd-44ad-9b99-532e68f5a92b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d54e11a3-089c-4a2f-825d-3cbf82c14064","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:48846","PortSpecifier":{"PortValue":48846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d54e11a3-089c-4a2f-825d-3cbf82c14064","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d54e11a3-089c-4a2f-825d-3cbf82c14064","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:48846","PortSpecifier":{"PortValue":48846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973788,"nanos":666963574},"http":{"id":"d54e11a3-089c-4a2f-825d-3cbf82c14064","method":"POST","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"info","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d54e11a3-089c-4a2f-825d-3cbf82c14064","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}}
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d54e11a3-089c-4a2f-825d-3cbf82c14064","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adfb3114-39d3-4ef6-996c-5af046309b06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20384","PortSpecifier":{"PortValue":20384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"adfb3114-39d3-4ef6-996c-5af046309b06","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adfb3114-39d3-4ef6-996c-5af046309b06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20384","PortSpecifier":{"PortValue":20384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973788,"nanos":690588917},"http":{"id":"adfb3114-39d3-4ef6-996c-5af046309b06","method":"POST","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-length":"83","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"httpbin.org:443/*","x-envoy-external-address":"100.64.0.4","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-request-id":"adfb3114-39d3-4ef6-996c-5af046309b06"},"path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"},"metadata_context":{}}}
{"level":"info","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adfb3114-39d3-4ef6-996c-5af046309b06","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}}
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adfb3114-39d3-4ef6-996c-5af046309b06","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc172e5b-fe6f-4782-a98b-58e539f759b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23490","PortSpecifier":{"PortValue":23490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc172e5b-fe6f-4782-a98b-58e539f759b5","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc172e5b-fe6f-4782-a98b-58e539f759b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23490","PortSpecifier":{"PortValue":23490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973788,"nanos":712884882},"http":{"id":"cc172e5b-fe6f-4782-a98b-58e539f759b5","method":"POST","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc172e5b-fe6f-4782-a98b-58e539f759b5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WJmaAS0oLogUPYIH_dPowRu2CuJl98oQGQfvURMii42RH1pVl4i8lMVIoho7"}
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc172e5b-fe6f-4782-a98b-58e539f759b5","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WJmaAS0oLogUPYIH_dPowRu2CuJl98oQGQfvURMii42RH1pVl4i8lMVIoho7\"}"}
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc172e5b-fe6f-4782-a98b-58e539f759b5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc172e5b-fe6f-4782-a98b-58e539f759b5","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-external-model\",\"requestedSubscription\":\"e2e-external-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc172e5b-fe6f-4782-a98b-58e539f759b5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-external-model","token_rate_limits":[{"limit":10000,"window":"1h"}]}],"name":"e2e-external-subscription","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc172e5b-fe6f-4782-a98b-58e539f759b5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc172e5b-fe6f-4782-a98b-58e539f759b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc172e5b-fe6f-4782-a98b-58e539f759b5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc172e5b-fe6f-4782-a98b-58e539f759b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc172e5b-fe6f-4782-a98b-58e539f759b5","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc172e5b-fe6f-4782-a98b-58e539f759b5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-external-subscription"}
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc172e5b-fe6f-4782-a98b-58e539f759b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cda3e26c-7222-417a-94b7-c40d45674d87","selected_subscription":"e2e-external-subscription","selected_subscription_key":"models-as-a-service/e2e-external-subscription@llm/e2e-external-model","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"e2e-external-model","token_rate_limits":[{"limit":10000,"window":"1h"}]}],"name":"e2e-external-subscription","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc172e5b-fe6f-4782-a98b-58e539f759b5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:56:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc172e5b-fe6f-4782-a98b-58e539f759b5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"}
{"level":"debug","ts":"2026-06-09T02:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T02:56:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T02:56:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T02:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"}
{"level":"debug","ts":"2026-06-09T02:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T02:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T02:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T02:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T02:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"}
{"level":"error","ts":"2026-06-09T02:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T02:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T02:56:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T02:56:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"}
{"level":"info","ts":"2026-06-09T02:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T02:56:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T02:56:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"}
{"level":"info","ts":"2026-06-09T02:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T02:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"}
{"level":"debug","ts":"2026-06-09T02:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T02:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"}
{"level":"info","ts":"2026-06-09T02:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"}
{"level":"debug","ts":"2026-06-09T02:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T02:56:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-09T02:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T02:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"debug","ts":"2026-06-09T02:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T02:57:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T02:57:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-09T02:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T02:57:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T02:57:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-09T02:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T02:57:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T02:57:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"error","ts":"2026-06-09T02:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T02:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T02:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-09T02:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-09T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"009c66ce0c6fb83c908e2896ace7f2e90352c53b6c8f9f1f2afe58fdcf3bde0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T02:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T02:57:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/009c66ce0c6fb83c908e2896ace7f2e90352c53b6c8f9f1f2afe58fdcf3bde0e"}
{"level":"info","ts":"2026-06-09T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"009c66ce0c6fb83c908e2896ace7f2e90352c53b6c8f9f1f2afe58fdcf3bde0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"009c66ce0c6fb83c908e2896ace7f2e90352c53b6c8f9f1f2afe58fdcf3bde0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T02:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T02:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["009c66ce0c6fb83c908e2896ace7f2e90352c53b6c8f9f1f2afe58fdcf3bde0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/009c66ce0c6fb83c908e2896ace7f2e90352c53b6c8f9f1f2afe58fdcf3bde0e"}
{"level":"info","ts":"2026-06-09T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"009c66ce0c6fb83c908e2896ace7f2e90352c53b6c8f9f1f2afe58fdcf3bde0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"009c66ce0c6fb83c908e2896ace7f2e90352c53b6c8f9f1f2afe58fdcf3bde0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"009c66ce0c6fb83c908e2896ace7f2e90352c53b6c8f9f1f2afe58fdcf3bde0e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/009c66ce0c6fb83c908e2896ace7f2e90352c53b6c8f9f1f2afe58fdcf3bde0e"}
{"level":"debug","ts":"2026-06-09T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3d3f9962a3945ad7e10ece823b02e423a9c8492c835a8d29f13a65331129ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T02:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T02:57:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3d3f9962a3945ad7e10ece823b02e423a9c8492c835a8d29f13a65331129ee"}
{"level":"info","ts":"2026-06-09T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3d3f9962a3945ad7e10ece823b02e423a9c8492c835a8d29f13a65331129ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3d3f9962a3945ad7e10ece823b02e423a9c8492c835a8d29f13a65331129ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3d3f9962a3945ad7e10ece823b02e423a9c8492c835a8d29f13a65331129ee"}
{"level":"debug","ts":"2026-06-09T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3d3f9962a3945ad7e10ece823b02e423a9c8492c835a8d29f13a65331129ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T02:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T02:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd3d3f9962a3945ad7e10ece823b02e423a9c8492c835a8d29f13a65331129ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3d3f9962a3945ad7e10ece823b02e423a9c8492c835a8d29f13a65331129ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3d3f9962a3945ad7e10ece823b02e423a9c8492c835a8d29f13a65331129ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3d3f9962a3945ad7e10ece823b02e423a9c8492c835a8d29f13a65331129ee"}
{"level":"info","ts":"2026-06-09T02:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/009c66ce0c6fb83c908e2896ace7f2e90352c53b6c8f9f1f2afe58fdcf3bde0e"}
{"level":"info","ts":"2026-06-09T02:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd3d3f9962a3945ad7e10ece823b02e423a9c8492c835a8d29f13a65331129ee"}
{"level":"debug","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14cdf7b4b339c86b4970473f656fc7a52979e25e547433a8546839030ccbabf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T02:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T02:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14cdf7b4b339c86b4970473f656fc7a52979e25e547433a8546839030ccbabf5"}
{"level":"info","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14cdf7b4b339c86b4970473f656fc7a52979e25e547433a8546839030ccbabf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14cdf7b4b339c86b4970473f656fc7a52979e25e547433a8546839030ccbabf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T02:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T02:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14cdf7b4b339c86b4970473f656fc7a52979e25e547433a8546839030ccbabf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14cdf7b4b339c86b4970473f656fc7a52979e25e547433a8546839030ccbabf5"}
{"level":"info","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14cdf7b4b339c86b4970473f656fc7a52979e25e547433a8546839030ccbabf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14cdf7b4b339c86b4970473f656fc7a52979e25e547433a8546839030ccbabf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14cdf7b4b339c86b4970473f656fc7a52979e25e547433a8546839030ccbabf5"}
{"level":"debug","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T02:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T02:57:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33"}
{"level":"info","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T02:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T02:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33"}
{"level":"info","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T02:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T02:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33"}
{"level":"error","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T02:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T02:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T02:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T02:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33"}
{"level":"error","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T02:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T02:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/821bb3d89f1dbea4a63d679d90c182ed8c3669918619d28a17055dabaeec8a33"}
{"level":"info","ts":"2026-06-09T02:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14cdf7b4b339c86b4970473f656fc7a52979e25e547433a8546839030ccbabf5"}
{"level":"info","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32386338-95b6-428b-b096-cf789247e0e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20948","PortSpecifier":{"PortValue":20948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32386338-95b6-428b-b096-cf789247e0e1","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32386338-95b6-428b-b096-cf789247e0e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20948","PortSpecifier":{"PortValue":20948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973854,"nanos":130392142},"http":{"id":"32386338-95b6-428b-b096-cf789247e0e1","method":"POST","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32386338-95b6-428b-b096-cf789247e0e1","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974154,"groups":["Engineering","Project-Alpha"],"iat":1780973854,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:306ca3a0-b3d5-57e0-f8d7-5265f43be1eb","preferred_username":"alice_lead","scope":"profile email","sid":"sjf8xx2wLQ3JzWyUEtqR5hoB","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32386338-95b6-428b-b096-cf789247e0e1","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974154,"groups":["Engineering","Project-Alpha"],"iat":1780973854,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:306ca3a0-b3d5-57e0-f8d7-5265f43be1eb","preferred_username":"alice_lead","scope":"profile email","sid":"sjf8xx2wLQ3JzWyUEtqR5hoB","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32386338-95b6-428b-b096-cf789247e0e1","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32386338-95b6-428b-b096-cf789247e0e1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32386338-95b6-428b-b096-cf789247e0e1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32386338-95b6-428b-b096-cf789247e0e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32386338-95b6-428b-b096-cf789247e0e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42ab426c-df3c-4d47-aefe-38d0abf7b89f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:47510","PortSpecifier":{"PortValue":47510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42ab426c-df3c-4d47-aefe-38d0abf7b89f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42ab426c-df3c-4d47-aefe-38d0abf7b89f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:47510","PortSpecifier":{"PortValue":47510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973854,"nanos":234738965},"http":{"id":"42ab426c-df3c-4d47-aefe-38d0abf7b89f","method":"POST","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"42ab426c-df3c-4d47-aefe-38d0abf7b89f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42ab426c-df3c-4d47-aefe-38d0abf7b89f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"42ab426c-df3c-4d47-aefe-38d0abf7b89f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"not authenticated"}
{"level":"info","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42ab426c-df3c-4d47-aefe-38d0abf7b89f","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}"}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42ab426c-df3c-4d47-aefe-38d0abf7b89f","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}}
{"level":"info","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"febb9a20-5953-4661-a1d8-3d58b8be32fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:24682","PortSpecifier":{"PortValue":24682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"febb9a20-5953-4661-a1d8-3d58b8be32fb","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"febb9a20-5953-4661-a1d8-3d58b8be32fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:24682","PortSpecifier":{"PortValue":24682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973854,"nanos":298126232},"http":{"id":"febb9a20-5953-4661-a1d8-3d58b8be32fb","method":"POST","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer","content-length":"35","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.38~maas-default-gateway-openshift-default-687ff6996-g75fn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-request-id":"febb9a20-5953-4661-a1d8-3d58b8be32fb"},"path":"/maas-api/v1/api-keys","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"metadata_context":{}}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"febb9a20-5953-4661-a1d8-3d58b8be32fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"credential not found"}
{"level":"info","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"febb9a20-5953-4661-a1d8-3d58b8be32fb","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"openshift-identities\":\"credential not found\"}"}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"febb9a20-5953-4661-a1d8-3d58b8be32fb","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"openshift-identities\":\"credential not found\"}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}}
{"level":"info","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4882cc4-bf25-47bb-8c5d-534e588913d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:61094","PortSpecifier":{"PortValue":61094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4882cc4-bf25-47bb-8c5d-534e588913d6","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4882cc4-bf25-47bb-8c5d-534e588913d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:61094","PortSpecifier":{"PortValue":61094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973854,"nanos":320567114},"http":{"id":"e4882cc4-bf25-47bb-8c5d-534e588913d6","method":"POST","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-length":"36","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.38~maas-default-gateway-openshift-default-687ff6996-g75fn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-request-id":"e4882cc4-bf25-47bb-8c5d-534e588913d6"},"path":"/maas-api/v1/api-keys","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"metadata_context":{}}}
{"level":"info","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4882cc4-bf25-47bb-8c5d-534e588913d6","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}"}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4882cc4-bf25-47bb-8c5d-534e588913d6","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}}
{"level":"info","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7cfc660-205b-4ecb-abe0-84d8ae1eb859","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:18316","PortSpecifier":{"PortValue":18316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7cfc660-205b-4ecb-abe0-84d8ae1eb859","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7cfc660-205b-4ecb-abe0-84d8ae1eb859","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:18316","PortSpecifier":{"PortValue":18316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973854,"nanos":678259422},"http":{"id":"f7cfc660-205b-4ecb-abe0-84d8ae1eb859","method":"POST","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7cfc660-205b-4ecb-abe0-84d8ae1eb859","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974154,"groups":["Site-Reliability"],"iat":1780973854,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:68b3bba4-a4d5-a7c1-2017-75725725e485","preferred_username":"bob_sre","scope":"profile email","sid":"UkOSiEb7OKPDs-0ASpEulxqZ","sub":"7f4e841f-9665-4b4c-b924-78385a046210","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7cfc660-205b-4ecb-abe0-84d8ae1eb859","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974154,"groups":["Site-Reliability"],"iat":1780973854,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:68b3bba4-a4d5-a7c1-2017-75725725e485","preferred_username":"bob_sre","scope":"profile email","sid":"UkOSiEb7OKPDs-0ASpEulxqZ","sub":"7f4e841f-9665-4b4c-b924-78385a046210","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7cfc660-205b-4ecb-abe0-84d8ae1eb859","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7cfc660-205b-4ecb-abe0-84d8ae1eb859","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7cfc660-205b-4ecb-abe0-84d8ae1eb859","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"}
{"level":"info","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7cfc660-205b-4ecb-abe0-84d8ae1eb859","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7cfc660-205b-4ecb-abe0-84d8ae1eb859","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"223d1d8b-0931-43f8-821b-069eb3e2b590","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64502","PortSpecifier":{"PortValue":64502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"223d1d8b-0931-43f8-821b-069eb3e2b590","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"223d1d8b-0931-43f8-821b-069eb3e2b590","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64502","PortSpecifier":{"PortValue":64502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973854,"nanos":886121056},"http":{"id":"223d1d8b-0931-43f8-821b-069eb3e2b590","method":"POST","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"223d1d8b-0931-43f8-821b-069eb3e2b590","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974154,"groups":["Engineering","Project-Alpha"],"iat":1780973854,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2db656c4-2029-09de-04bb-615a3bfc2ee3","preferred_username":"alice_lead","scope":"profile email","sid":"J_LaVp9sXm7ht4kDugk8iN9L","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"223d1d8b-0931-43f8-821b-069eb3e2b590","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974154,"groups":["Engineering","Project-Alpha"],"iat":1780973854,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2db656c4-2029-09de-04bb-615a3bfc2ee3","preferred_username":"alice_lead","scope":"profile email","sid":"J_LaVp9sXm7ht4kDugk8iN9L","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"223d1d8b-0931-43f8-821b-069eb3e2b590","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"223d1d8b-0931-43f8-821b-069eb3e2b590","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"223d1d8b-0931-43f8-821b-069eb3e2b590","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"223d1d8b-0931-43f8-821b-069eb3e2b590","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"223d1d8b-0931-43f8-821b-069eb3e2b590","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f050b6e9-f234-4da6-9531-58c4932f3850","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:24694","PortSpecifier":{"PortValue":24694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f050b6e9-f234-4da6-9531-58c4932f3850","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f050b6e9-f234-4da6-9531-58c4932f3850","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:24694","PortSpecifier":{"PortValue":24694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973854,"nanos":910315212},"http":{"id":"f050b6e9-f234-4da6-9531-58c4932f3850","method":"GET","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f050b6e9-f234-4da6-9531-58c4932f3850","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11YOGgU5SN8edqJoe_RLQbyJzDxjg9XVFk3WULT9PsCe0bxhzxpWU8WAXNQ80"}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f050b6e9-f234-4da6-9531-58c4932f3850","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11YOGgU5SN8edqJoe_RLQbyJzDxjg9XVFk3WULT9PsCe0bxhzxpWU8WAXNQ80\"}"}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f050b6e9-f234-4da6-9531-58c4932f3850","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f050b6e9-f234-4da6-9531-58c4932f3850","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f050b6e9-f234-4da6-9531-58c4932f3850","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f050b6e9-f234-4da6-9531-58c4932f3850","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f050b6e9-f234-4da6-9531-58c4932f3850","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f050b6e9-f234-4da6-9531-58c4932f3850","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f050b6e9-f234-4da6-9531-58c4932f3850","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa7c9684-4e71-4d58-afeb-3c064f0da3de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:38608","PortSpecifier":{"PortValue":38608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa7c9684-4e71-4d58-afeb-3c064f0da3de","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa7c9684-4e71-4d58-afeb-3c064f0da3de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:38608","PortSpecifier":{"PortValue":38608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973854,"nanos":924059970},"http":{"id":"aa7c9684-4e71-4d58-afeb-3c064f0da3de","method":"GET","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa7c9684-4e71-4d58-afeb-3c064f0da3de","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11YOGgU5SN8edqJoe_RLQbyJzDxjg9XVFk3WULT9PsCe0bxhzxpWU8WAXNQ80"}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aa7c9684-4e71-4d58-afeb-3c064f0da3de","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11YOGgU5SN8edqJoe_RLQbyJzDxjg9XVFk3WULT9PsCe0bxhzxpWU8WAXNQ80\"}"}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aa7c9684-4e71-4d58-afeb-3c064f0da3de","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aa7c9684-4e71-4d58-afeb-3c064f0da3de","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aa7c9684-4e71-4d58-afeb-3c064f0da3de","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa7c9684-4e71-4d58-afeb-3c064f0da3de","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-11YOGgU5SN8edqJoe_RLQbyJzDxjg9XVFk3WULT9PsCe0bxhzxpWU8WAXNQ80","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.43","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.38~maas-default-gateway-openshift-default-687ff6996-g75fn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.134.0.43","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"aa7c9684-4e71-4d58-afeb-3c064f0da3de"},"host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","id":"aa7c9684-4e71-4d58-afeb-3c064f0da3de","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":924059970,"seconds":1780973854},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.134.0.43:38608","port":38608}}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa7c9684-4e71-4d58-afeb-3c064f0da3de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa7c9684-4e71-4d58-afeb-3c064f0da3de","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa7c9684-4e71-4d58-afeb-3c064f0da3de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa7c9684-4e71-4d58-afeb-3c064f0da3de","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa7c9684-4e71-4d58-afeb-3c064f0da3de","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa7c9684-4e71-4d58-afeb-3c064f0da3de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"5b7eb3ae-258b-447c-99e7-a7794ea543f0","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa7c9684-4e71-4d58-afeb-3c064f0da3de","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa7c9684-4e71-4d58-afeb-3c064f0da3de","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bb0d10e-8cc7-4ba8-8185-44a4f108d651","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:18332","PortSpecifier":{"PortValue":18332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8bb0d10e-8cc7-4ba8-8185-44a4f108d651","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bb0d10e-8cc7-4ba8-8185-44a4f108d651","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:18332","PortSpecifier":{"PortValue":18332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973854,"nanos":950391563},"http":{"id":"8bb0d10e-8cc7-4ba8-8185-44a4f108d651","method":"POST","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8bb0d10e-8cc7-4ba8-8185-44a4f108d651","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11YOGgU5SN8edqJoe_RLQbyJzDxjg9XVFk3WULT9PsCe0bxhzxpWU8WAXNQ80"}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8bb0d10e-8cc7-4ba8-8185-44a4f108d651","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11YOGgU5SN8edqJoe_RLQbyJzDxjg9XVFk3WULT9PsCe0bxhzxpWU8WAXNQ80\"}"}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8bb0d10e-8cc7-4ba8-8185-44a4f108d651","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8bb0d10e-8cc7-4ba8-8185-44a4f108d651","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8bb0d10e-8cc7-4ba8-8185-44a4f108d651","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8bb0d10e-8cc7-4ba8-8185-44a4f108d651","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bb0d10e-8cc7-4ba8-8185-44a4f108d651","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bb0d10e-8cc7-4ba8-8185-44a4f108d651","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bb0d10e-8cc7-4ba8-8185-44a4f108d651","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bb0d10e-8cc7-4ba8-8185-44a4f108d651","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bb0d10e-8cc7-4ba8-8185-44a4f108d651","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bb0d10e-8cc7-4ba8-8185-44a4f108d651","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"5b7eb3ae-258b-447c-99e7-a7794ea543f0","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bb0d10e-8cc7-4ba8-8185-44a4f108d651","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bb0d10e-8cc7-4ba8-8185-44a4f108d651","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82355bfe-dea2-476d-891c-18379af806c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64514","PortSpecifier":{"PortValue":64514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82355bfe-dea2-476d-891c-18379af806c4","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82355bfe-dea2-476d-891c-18379af806c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64514","PortSpecifier":{"PortValue":64514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973855,"nanos":46815847},"http":{"id":"82355bfe-dea2-476d-891c-18379af806c4","method":"POST","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82355bfe-dea2-476d-891c-18379af806c4","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974155,"groups":["Engineering","Project-Alpha"],"iat":1780973855,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6206ab4a-e7f0-c424-24b2-da25dc4b7805","preferred_username":"alice_lead","scope":"profile email","sid":"ErTAYcEozHhTbJeu9PYUZr1h","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T02:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82355bfe-dea2-476d-891c-18379af806c4","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974155,"groups":["Engineering","Project-Alpha"],"iat":1780973855,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6206ab4a-e7f0-c424-24b2-da25dc4b7805","preferred_username":"alice_lead","scope":"profile email","sid":"ErTAYcEozHhTbJeu9PYUZr1h","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82355bfe-dea2-476d-891c-18379af806c4","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T02:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82355bfe-dea2-476d-891c-18379af806c4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T02:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82355bfe-dea2-476d-891c-18379af806c4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T02:57:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82355bfe-dea2-476d-891c-18379af806c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82355bfe-dea2-476d-891c-18379af806c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d88668bf-8b01-48c9-900b-8f7b8e9b9991","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20962","PortSpecifier":{"PortValue":20962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d88668bf-8b01-48c9-900b-8f7b8e9b9991","method":"DELETE","path":"/maas-api/v1/api-keys/07c9a5a0-6ac0-4549-a9dd-090e72bdb0af","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d88668bf-8b01-48c9-900b-8f7b8e9b9991","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20962","PortSpecifier":{"PortValue":20962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973855,"nanos":71093966},"http":{"id":"d88668bf-8b01-48c9-900b-8f7b8e9b9991","method":"DELETE","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/07c9a5a0-6ac0-4549-a9dd-090e72bdb0af",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d88668bf-8b01-48c9-900b-8f7b8e9b9991","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974155,"groups":["Engineering","Project-Alpha"],"iat":1780973855,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6206ab4a-e7f0-c424-24b2-da25dc4b7805","preferred_username":"alice_lead","scope":"profile email","sid":"ErTAYcEozHhTbJeu9PYUZr1h","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T02:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d88668bf-8b01-48c9-900b-8f7b8e9b9991","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974155,"groups":["Engineering","Project-Alpha"],"iat":1780973855,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6206ab4a-e7f0-c424-24b2-da25dc4b7805","preferred_username":"alice_lead","scope":"profile email","sid":"ErTAYcEozHhTbJeu9PYUZr1h","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/07c9a5a0-6ac0-4549-a9dd-090e72bdb0af",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d88668bf-8b01-48c9-900b-8f7b8e9b9991","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T02:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d88668bf-8b01-48c9-900b-8f7b8e9b9991","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T02:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d88668bf-8b01-48c9-900b-8f7b8e9b9991","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T02:57:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d88668bf-8b01-48c9-900b-8f7b8e9b9991","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d88668bf-8b01-48c9-900b-8f7b8e9b9991","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"216a840a-f9e9-4077-84a8-e59cf0b96e5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:47522","PortSpecifier":{"PortValue":47522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"216a840a-f9e9-4077-84a8-e59cf0b96e5b","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"216a840a-f9e9-4077-84a8-e59cf0b96e5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:47522","PortSpecifier":{"PortValue":47522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973858,"nanos":104209208},"http":{"id":"216a840a-f9e9-4077-84a8-e59cf0b96e5b","method":"GET","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"216a840a-f9e9-4077-84a8-e59cf0b96e5b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZYp7fzVPTxAcf4Ph_P6EtmSIenX2CEzib1gnSXKYVyqkMvdxgl5m1AbvqJ9U"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"216a840a-f9e9-4077-84a8-e59cf0b96e5b","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZYp7fzVPTxAcf4Ph_P6EtmSIenX2CEzib1gnSXKYVyqkMvdxgl5m1AbvqJ9U\"}"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"216a840a-f9e9-4077-84a8-e59cf0b96e5b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"216a840a-f9e9-4077-84a8-e59cf0b96e5b","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"216a840a-f9e9-4077-84a8-e59cf0b96e5b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"no such key: username"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"216a840a-f9e9-4077-84a8-e59cf0b96e5b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"no such key: groups"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"216a840a-f9e9-4077-84a8-e59cf0b96e5b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"216a840a-f9e9-4077-84a8-e59cf0b96e5b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0755874e-6925-46a5-919a-6e70619dba04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:24696","PortSpecifier":{"PortValue":24696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0755874e-6925-46a5-919a-6e70619dba04","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0755874e-6925-46a5-919a-6e70619dba04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:24696","PortSpecifier":{"PortValue":24696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973858,"nanos":247037962},"http":{"id":"0755874e-6925-46a5-919a-6e70619dba04","method":"POST","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"0755874e-6925-46a5-919a-6e70619dba04","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0755874e-6925-46a5-919a-6e70619dba04","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"0755874e-6925-46a5-919a-6e70619dba04","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"not authenticated"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0755874e-6925-46a5-919a-6e70619dba04","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}"}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0755874e-6925-46a5-919a-6e70619dba04","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20fd23ec-0846-4b57-9fdb-b82a8f91f947","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:61096","PortSpecifier":{"PortValue":61096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20fd23ec-0846-4b57-9fdb-b82a8f91f947","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20fd23ec-0846-4b57-9fdb-b82a8f91f947","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:61096","PortSpecifier":{"PortValue":61096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973858,"nanos":414290351},"http":{"id":"20fd23ec-0846-4b57-9fdb-b82a8f91f947","method":"POST","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20fd23ec-0846-4b57-9fdb-b82a8f91f947","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974158,"groups":["Engineering","Project-Alpha"],"iat":1780973858,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:b340c7ea-22e8-aeed-902d-8825c9a95a71","preferred_username":"alice_lead","scope":"profile email","sid":"Q7UMT3njQZi_9syEkahLKMnt","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20fd23ec-0846-4b57-9fdb-b82a8f91f947","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974158,"groups":["Engineering","Project-Alpha"],"iat":1780973858,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:b340c7ea-22e8-aeed-902d-8825c9a95a71","preferred_username":"alice_lead","scope":"profile email","sid":"Q7UMT3njQZi_9syEkahLKMnt","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20fd23ec-0846-4b57-9fdb-b82a8f91f947","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20fd23ec-0846-4b57-9fdb-b82a8f91f947","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20fd23ec-0846-4b57-9fdb-b82a8f91f947","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20fd23ec-0846-4b57-9fdb-b82a8f91f947","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20fd23ec-0846-4b57-9fdb-b82a8f91f947","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2ecd927-022b-4c2c-bbfc-b4da42355590","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:18340","PortSpecifier":{"PortValue":18340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2ecd927-022b-4c2c-bbfc-b4da42355590","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2ecd927-022b-4c2c-bbfc-b4da42355590","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:18340","PortSpecifier":{"PortValue":18340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973858,"nanos":450774406},"http":{"id":"a2ecd927-022b-4c2c-bbfc-b4da42355590","method":"POST","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2ecd927-022b-4c2c-bbfc-b4da42355590","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974158,"groups":["Site-Reliability"],"iat":1780973858,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ac34d0c-5377-4c4e-6fe4-35e2f080a1c7","preferred_username":"bob_sre","scope":"profile email","sid":"Om7im5CbO-X520zV6iHKz-bA","sub":"7f4e841f-9665-4b4c-b924-78385a046210","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2ecd927-022b-4c2c-bbfc-b4da42355590","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974158,"groups":["Site-Reliability"],"iat":1780973858,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ac34d0c-5377-4c4e-6fe4-35e2f080a1c7","preferred_username":"bob_sre","scope":"profile email","sid":"Om7im5CbO-X520zV6iHKz-bA","sub":"7f4e841f-9665-4b4c-b924-78385a046210","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2ecd927-022b-4c2c-bbfc-b4da42355590","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2ecd927-022b-4c2c-bbfc-b4da42355590","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2ecd927-022b-4c2c-bbfc-b4da42355590","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2ecd927-022b-4c2c-bbfc-b4da42355590","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2ecd927-022b-4c2c-bbfc-b4da42355590","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"386784ed-599b-4a71-8ecd-31de51f70f35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20972","PortSpecifier":{"PortValue":20972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"386784ed-599b-4a71-8ecd-31de51f70f35","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"386784ed-599b-4a71-8ecd-31de51f70f35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20972","PortSpecifier":{"PortValue":20972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973858,"nanos":538665466},"http":{"id":"386784ed-599b-4a71-8ecd-31de51f70f35","method":"POST","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"386784ed-599b-4a71-8ecd-31de51f70f35","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974158,"groups":["Engineering","Project-Alpha"],"iat":1780973858,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:969123e1-dc10-a6cd-418f-c69111a7b5ed","preferred_username":"alice_lead","scope":"profile email","sid":"wDQCbjjsNf2EFDXzaVlaKfLh","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"386784ed-599b-4a71-8ecd-31de51f70f35","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974158,"groups":["Engineering","Project-Alpha"],"iat":1780973858,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:969123e1-dc10-a6cd-418f-c69111a7b5ed","preferred_username":"alice_lead","scope":"profile email","sid":"wDQCbjjsNf2EFDXzaVlaKfLh","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"386784ed-599b-4a71-8ecd-31de51f70f35","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"386784ed-599b-4a71-8ecd-31de51f70f35","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"386784ed-599b-4a71-8ecd-31de51f70f35","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"386784ed-599b-4a71-8ecd-31de51f70f35","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"386784ed-599b-4a71-8ecd-31de51f70f35","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31fd9adc-cd6a-4286-ad3f-c5f920bf2890","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:47528","PortSpecifier":{"PortValue":47528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31fd9adc-cd6a-4286-ad3f-c5f920bf2890","method":"DELETE","path":"/maas-api/v1/api-keys/e2abf35e-fce9-43f3-8c08-305de206b122","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31fd9adc-cd6a-4286-ad3f-c5f920bf2890","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:47528","PortSpecifier":{"PortValue":47528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973858,"nanos":562380863},"http":{"id":"31fd9adc-cd6a-4286-ad3f-c5f920bf2890","method":"DELETE","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/e2abf35e-fce9-43f3-8c08-305de206b122",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31fd9adc-cd6a-4286-ad3f-c5f920bf2890","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974158,"groups":["Engineering","Project-Alpha"],"iat":1780973858,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:969123e1-dc10-a6cd-418f-c69111a7b5ed","preferred_username":"alice_lead","scope":"profile email","sid":"wDQCbjjsNf2EFDXzaVlaKfLh","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31fd9adc-cd6a-4286-ad3f-c5f920bf2890","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974158,"groups":["Engineering","Project-Alpha"],"iat":1780973858,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:969123e1-dc10-a6cd-418f-c69111a7b5ed","preferred_username":"alice_lead","scope":"profile email","sid":"wDQCbjjsNf2EFDXzaVlaKfLh","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/e2abf35e-fce9-43f3-8c08-305de206b122",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31fd9adc-cd6a-4286-ad3f-c5f920bf2890","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31fd9adc-cd6a-4286-ad3f-c5f920bf2890","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31fd9adc-cd6a-4286-ad3f-c5f920bf2890","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31fd9adc-cd6a-4286-ad3f-c5f920bf2890","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31fd9adc-cd6a-4286-ad3f-c5f920bf2890","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cfb01ac-66ac-4d62-bc8f-e5f376005259","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64524","PortSpecifier":{"PortValue":64524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2cfb01ac-66ac-4d62-bc8f-e5f376005259","method":"DELETE","path":"/maas-api/v1/api-keys/e2abf35e-fce9-43f3-8c08-305de206b122","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cfb01ac-66ac-4d62-bc8f-e5f376005259","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64524","PortSpecifier":{"PortValue":64524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973858,"nanos":586041338},"http":{"id":"2cfb01ac-66ac-4d62-bc8f-e5f376005259","method":"DELETE","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/e2abf35e-fce9-43f3-8c08-305de206b122",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2cfb01ac-66ac-4d62-bc8f-e5f376005259","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974158,"groups":["Engineering","Project-Alpha"],"iat":1780973858,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:969123e1-dc10-a6cd-418f-c69111a7b5ed","preferred_username":"alice_lead","scope":"profile email","sid":"wDQCbjjsNf2EFDXzaVlaKfLh","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2cfb01ac-66ac-4d62-bc8f-e5f376005259","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974158,"groups":["Engineering","Project-Alpha"],"iat":1780973858,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:969123e1-dc10-a6cd-418f-c69111a7b5ed","preferred_username":"alice_lead","scope":"profile email","sid":"wDQCbjjsNf2EFDXzaVlaKfLh","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/e2abf35e-fce9-43f3-8c08-305de206b122",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cfb01ac-66ac-4d62-bc8f-e5f376005259","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cfb01ac-66ac-4d62-bc8f-e5f376005259","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cfb01ac-66ac-4d62-bc8f-e5f376005259","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cfb01ac-66ac-4d62-bc8f-e5f376005259","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cfb01ac-66ac-4d62-bc8f-e5f376005259","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e0a123f-174a-49b5-8d6c-7bff5f234db4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:24710","PortSpecifier":{"PortValue":24710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e0a123f-174a-49b5-8d6c-7bff5f234db4","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e0a123f-174a-49b5-8d6c-7bff5f234db4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:24710","PortSpecifier":{"PortValue":24710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973858,"nanos":679441083},"http":{"id":"6e0a123f-174a-49b5-8d6c-7bff5f234db4","method":"POST","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e0a123f-174a-49b5-8d6c-7bff5f234db4","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974158,"groups":["Engineering","Project-Alpha"],"iat":1780973858,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:e90a9b3f-20b9-d633-9f18-b921a98e5e08","preferred_username":"alice_lead","scope":"profile email","sid":"laALdfli9AUOro2gP7B5117O","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e0a123f-174a-49b5-8d6c-7bff5f234db4","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974158,"groups":["Engineering","Project-Alpha"],"iat":1780973858,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:e90a9b3f-20b9-d633-9f18-b921a98e5e08","preferred_username":"alice_lead","scope":"profile email","sid":"laALdfli9AUOro2gP7B5117O","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e0a123f-174a-49b5-8d6c-7bff5f234db4","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e0a123f-174a-49b5-8d6c-7bff5f234db4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e0a123f-174a-49b5-8d6c-7bff5f234db4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e0a123f-174a-49b5-8d6c-7bff5f234db4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e0a123f-174a-49b5-8d6c-7bff5f234db4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a81312f-71fe-48b9-9be5-d80fa4cfac5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:18354","PortSpecifier":{"PortValue":18354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a81312f-71fe-48b9-9be5-d80fa4cfac5e","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a81312f-71fe-48b9-9be5-d80fa4cfac5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:18354","PortSpecifier":{"PortValue":18354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973858,"nanos":702863749},"http":{"id":"7a81312f-71fe-48b9-9be5-d80fa4cfac5e","method":"GET","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a81312f-71fe-48b9-9be5-d80fa4cfac5e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wkMT78eklvo6WJgU_RpC8PIE07JcdFd2XnhKjaG4WnbaUKEFz2mEIVsXBkt0"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7a81312f-71fe-48b9-9be5-d80fa4cfac5e","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wkMT78eklvo6WJgU_RpC8PIE07JcdFd2XnhKjaG4WnbaUKEFz2mEIVsXBkt0\"}"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7a81312f-71fe-48b9-9be5-d80fa4cfac5e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a81312f-71fe-48b9-9be5-d80fa4cfac5e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a81312f-71fe-48b9-9be5-d80fa4cfac5e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a81312f-71fe-48b9-9be5-d80fa4cfac5e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a81312f-71fe-48b9-9be5-d80fa4cfac5e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a81312f-71fe-48b9-9be5-d80fa4cfac5e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a81312f-71fe-48b9-9be5-d80fa4cfac5e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ade7b7ca-dda2-4b16-8d44-896c18414d8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:38608","PortSpecifier":{"PortValue":38608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ade7b7ca-dda2-4b16-8d44-896c18414d8e","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ade7b7ca-dda2-4b16-8d44-896c18414d8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:38608","PortSpecifier":{"PortValue":38608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973858,"nanos":707203357},"http":{"id":"ade7b7ca-dda2-4b16-8d44-896c18414d8e","method":"GET","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ade7b7ca-dda2-4b16-8d44-896c18414d8e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wkMT78eklvo6WJgU_RpC8PIE07JcdFd2XnhKjaG4WnbaUKEFz2mEIVsXBkt0"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ade7b7ca-dda2-4b16-8d44-896c18414d8e","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wkMT78eklvo6WJgU_RpC8PIE07JcdFd2XnhKjaG4WnbaUKEFz2mEIVsXBkt0\"}"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ade7b7ca-dda2-4b16-8d44-896c18414d8e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ade7b7ca-dda2-4b16-8d44-896c18414d8e","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ade7b7ca-dda2-4b16-8d44-896c18414d8e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ade7b7ca-dda2-4b16-8d44-896c18414d8e","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-wkMT78eklvo6WJgU_RpC8PIE07JcdFd2XnhKjaG4WnbaUKEFz2mEIVsXBkt0","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.43","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.38~maas-default-gateway-openshift-default-687ff6996-g75fn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.134.0.43","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"ade7b7ca-dda2-4b16-8d44-896c18414d8e"},"host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","id":"ade7b7ca-dda2-4b16-8d44-896c18414d8e","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":707203357,"seconds":1780973858},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.134.0.43:38608","port":38608}}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ade7b7ca-dda2-4b16-8d44-896c18414d8e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ade7b7ca-dda2-4b16-8d44-896c18414d8e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ade7b7ca-dda2-4b16-8d44-896c18414d8e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ade7b7ca-dda2-4b16-8d44-896c18414d8e","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ade7b7ca-dda2-4b16-8d44-896c18414d8e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ade7b7ca-dda2-4b16-8d44-896c18414d8e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"c80086d6-1766-48e8-8a2e-6d9ceeba356b","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ade7b7ca-dda2-4b16-8d44-896c18414d8e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ade7b7ca-dda2-4b16-8d44-896c18414d8e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11d6aeb4-3256-4a09-bf62-e20f1b8c390d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64532","PortSpecifier":{"PortValue":64532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11d6aeb4-3256-4a09-bf62-e20f1b8c390d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11d6aeb4-3256-4a09-bf62-e20f1b8c390d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64532","PortSpecifier":{"PortValue":64532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973858,"nanos":798766480},"http":{"id":"11d6aeb4-3256-4a09-bf62-e20f1b8c390d","method":"POST","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11d6aeb4-3256-4a09-bf62-e20f1b8c390d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974158,"groups":["Engineering","Project-Alpha"],"iat":1780973858,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:1cc74f12-eae2-5432-ac48-17257063ec2a","preferred_username":"alice_lead","scope":"profile email","sid":"emY6phQLRQCBHIdgmMJQ36Id","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11d6aeb4-3256-4a09-bf62-e20f1b8c390d","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974158,"groups":["Engineering","Project-Alpha"],"iat":1780973858,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:1cc74f12-eae2-5432-ac48-17257063ec2a","preferred_username":"alice_lead","scope":"profile email","sid":"emY6phQLRQCBHIdgmMJQ36Id","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11d6aeb4-3256-4a09-bf62-e20f1b8c390d","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11d6aeb4-3256-4a09-bf62-e20f1b8c390d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11d6aeb4-3256-4a09-bf62-e20f1b8c390d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11d6aeb4-3256-4a09-bf62-e20f1b8c390d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11d6aeb4-3256-4a09-bf62-e20f1b8c390d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"975820a8-d88a-429c-8d80-7821024ce946","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:61110","PortSpecifier":{"PortValue":61110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"975820a8-d88a-429c-8d80-7821024ce946","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"975820a8-d88a-429c-8d80-7821024ce946","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:61110","PortSpecifier":{"PortValue":61110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973858,"nanos":824014082},"http":{"id":"975820a8-d88a-429c-8d80-7821024ce946","method":"GET","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"975820a8-d88a-429c-8d80-7821024ce946","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wfUG9kjq43GVsRpz_t9Mq2XgpNMSoZKDrBRbH0IP3NaCh2Aawb0PVOA1UBb"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"975820a8-d88a-429c-8d80-7821024ce946","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wfUG9kjq43GVsRpz_t9Mq2XgpNMSoZKDrBRbH0IP3NaCh2Aawb0PVOA1UBb\"}"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"975820a8-d88a-429c-8d80-7821024ce946","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"975820a8-d88a-429c-8d80-7821024ce946","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"975820a8-d88a-429c-8d80-7821024ce946","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"975820a8-d88a-429c-8d80-7821024ce946","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"975820a8-d88a-429c-8d80-7821024ce946","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"975820a8-d88a-429c-8d80-7821024ce946","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"975820a8-d88a-429c-8d80-7821024ce946","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"884c5582-23c1-4c65-80bf-3b9c6c447263","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20978","PortSpecifier":{"PortValue":20978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"884c5582-23c1-4c65-80bf-3b9c6c447263","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"884c5582-23c1-4c65-80bf-3b9c6c447263","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20978","PortSpecifier":{"PortValue":20978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973858,"nanos":849751464},"http":{"id":"884c5582-23c1-4c65-80bf-3b9c6c447263","method":"GET","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"884c5582-23c1-4c65-80bf-3b9c6c447263","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wfUG9kjq43GVsRpz_t9Mq2XgpNMSoZKDrBRbH0IP3NaCh2Aawb0PVOA1UBb"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"884c5582-23c1-4c65-80bf-3b9c6c447263","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wfUG9kjq43GVsRpz_t9Mq2XgpNMSoZKDrBRbH0IP3NaCh2Aawb0PVOA1UBb\"}"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"884c5582-23c1-4c65-80bf-3b9c6c447263","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"884c5582-23c1-4c65-80bf-3b9c6c447263","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"884c5582-23c1-4c65-80bf-3b9c6c447263","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"884c5582-23c1-4c65-80bf-3b9c6c447263","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"884c5582-23c1-4c65-80bf-3b9c6c447263","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"884c5582-23c1-4c65-80bf-3b9c6c447263","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"884c5582-23c1-4c65-80bf-3b9c6c447263","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f75bb2df-33d5-43c3-bd8a-f4c9b2f9da55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:38608","PortSpecifier":{"PortValue":38608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f75bb2df-33d5-43c3-bd8a-f4c9b2f9da55","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f75bb2df-33d5-43c3-bd8a-f4c9b2f9da55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:38608","PortSpecifier":{"PortValue":38608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973858,"nanos":853992751},"http":{"id":"f75bb2df-33d5-43c3-bd8a-f4c9b2f9da55","method":"GET","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f75bb2df-33d5-43c3-bd8a-f4c9b2f9da55","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wfUG9kjq43GVsRpz_t9Mq2XgpNMSoZKDrBRbH0IP3NaCh2Aawb0PVOA1UBb"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f75bb2df-33d5-43c3-bd8a-f4c9b2f9da55","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wfUG9kjq43GVsRpz_t9Mq2XgpNMSoZKDrBRbH0IP3NaCh2Aawb0PVOA1UBb\"}"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f75bb2df-33d5-43c3-bd8a-f4c9b2f9da55","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f75bb2df-33d5-43c3-bd8a-f4c9b2f9da55","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f75bb2df-33d5-43c3-bd8a-f4c9b2f9da55","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f75bb2df-33d5-43c3-bd8a-f4c9b2f9da55","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-wfUG9kjq43GVsRpz_t9Mq2XgpNMSoZKDrBRbH0IP3NaCh2Aawb0PVOA1UBb","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.43","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.38~maas-default-gateway-openshift-default-687ff6996-g75fn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.134.0.43","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"f75bb2df-33d5-43c3-bd8a-f4c9b2f9da55"},"host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","id":"f75bb2df-33d5-43c3-bd8a-f4c9b2f9da55","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":853992751,"seconds":1780973858},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.134.0.43:38608","port":38608}}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f75bb2df-33d5-43c3-bd8a-f4c9b2f9da55","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f75bb2df-33d5-43c3-bd8a-f4c9b2f9da55","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f75bb2df-33d5-43c3-bd8a-f4c9b2f9da55","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f75bb2df-33d5-43c3-bd8a-f4c9b2f9da55","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f75bb2df-33d5-43c3-bd8a-f4c9b2f9da55","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f75bb2df-33d5-43c3-bd8a-f4c9b2f9da55","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"d5a66d37-cfc4-48e0-ac5e-ab21be0fcd64","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f75bb2df-33d5-43c3-bd8a-f4c9b2f9da55","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f75bb2df-33d5-43c3-bd8a-f4c9b2f9da55","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"512249d3-d3c1-4568-94b0-d63788aec719","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:24718","PortSpecifier":{"PortValue":24718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"512249d3-d3c1-4568-94b0-d63788aec719","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"512249d3-d3c1-4568-94b0-d63788aec719","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:24718","PortSpecifier":{"PortValue":24718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973858,"nanos":945096302},"http":{"id":"512249d3-d3c1-4568-94b0-d63788aec719","method":"POST","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"512249d3-d3c1-4568-94b0-d63788aec719","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974158,"groups":["Engineering","Project-Alpha"],"iat":1780973858,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:a865d54f-ffeb-9d7b-e468-27845a30ac93","preferred_username":"alice_lead","scope":"profile email","sid":"r82rm0vzezUL7QfbM4vX8f-M","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"512249d3-d3c1-4568-94b0-d63788aec719","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974158,"groups":["Engineering","Project-Alpha"],"iat":1780973858,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:a865d54f-ffeb-9d7b-e468-27845a30ac93","preferred_username":"alice_lead","scope":"profile email","sid":"r82rm0vzezUL7QfbM4vX8f-M","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"512249d3-d3c1-4568-94b0-d63788aec719","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"512249d3-d3c1-4568-94b0-d63788aec719","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"512249d3-d3c1-4568-94b0-d63788aec719","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"512249d3-d3c1-4568-94b0-d63788aec719","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"512249d3-d3c1-4568-94b0-d63788aec719","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6475c598-943d-4ea4-939b-8385a5e62c9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:18358","PortSpecifier":{"PortValue":18358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6475c598-943d-4ea4-939b-8385a5e62c9b","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6475c598-943d-4ea4-939b-8385a5e62c9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:18358","PortSpecifier":{"PortValue":18358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973858,"nanos":969166352},"http":{"id":"6475c598-943d-4ea4-939b-8385a5e62c9b","method":"GET","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6475c598-943d-4ea4-939b-8385a5e62c9b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OsxFKQAerjPVQiIr_vhsQafGJBfbTWGjp62MPrcH2BecatQS07fhj6atDm7j"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6475c598-943d-4ea4-939b-8385a5e62c9b","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OsxFKQAerjPVQiIr_vhsQafGJBfbTWGjp62MPrcH2BecatQS07fhj6atDm7j\"}"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6475c598-943d-4ea4-939b-8385a5e62c9b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6475c598-943d-4ea4-939b-8385a5e62c9b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6475c598-943d-4ea4-939b-8385a5e62c9b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6475c598-943d-4ea4-939b-8385a5e62c9b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6475c598-943d-4ea4-939b-8385a5e62c9b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6475c598-943d-4ea4-939b-8385a5e62c9b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6475c598-943d-4ea4-939b-8385a5e62c9b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e758bfc4-2a64-4451-9d64-0f2cd7fac63a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:38608","PortSpecifier":{"PortValue":38608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e758bfc4-2a64-4451-9d64-0f2cd7fac63a","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e758bfc4-2a64-4451-9d64-0f2cd7fac63a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:38608","PortSpecifier":{"PortValue":38608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973858,"nanos":973148524},"http":{"id":"e758bfc4-2a64-4451-9d64-0f2cd7fac63a","method":"GET","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e758bfc4-2a64-4451-9d64-0f2cd7fac63a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OsxFKQAerjPVQiIr_vhsQafGJBfbTWGjp62MPrcH2BecatQS07fhj6atDm7j"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e758bfc4-2a64-4451-9d64-0f2cd7fac63a","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OsxFKQAerjPVQiIr_vhsQafGJBfbTWGjp62MPrcH2BecatQS07fhj6atDm7j\"}"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e758bfc4-2a64-4451-9d64-0f2cd7fac63a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e758bfc4-2a64-4451-9d64-0f2cd7fac63a","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e758bfc4-2a64-4451-9d64-0f2cd7fac63a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e758bfc4-2a64-4451-9d64-0f2cd7fac63a","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-1OsxFKQAerjPVQiIr_vhsQafGJBfbTWGjp62MPrcH2BecatQS07fhj6atDm7j","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.43","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.38~maas-default-gateway-openshift-default-687ff6996-g75fn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.134.0.43","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"e758bfc4-2a64-4451-9d64-0f2cd7fac63a"},"host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","id":"e758bfc4-2a64-4451-9d64-0f2cd7fac63a","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":973148524,"seconds":1780973858},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.134.0.43:38608","port":38608}}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e758bfc4-2a64-4451-9d64-0f2cd7fac63a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e758bfc4-2a64-4451-9d64-0f2cd7fac63a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e758bfc4-2a64-4451-9d64-0f2cd7fac63a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e758bfc4-2a64-4451-9d64-0f2cd7fac63a","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e758bfc4-2a64-4451-9d64-0f2cd7fac63a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e758bfc4-2a64-4451-9d64-0f2cd7fac63a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"d39ccc3a-d107-4da1-acec-1fcce7459d7d","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e758bfc4-2a64-4451-9d64-0f2cd7fac63a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e758bfc4-2a64-4451-9d64-0f2cd7fac63a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c954d879-d082-4e33-bf75-5495e0bb4755","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64544","PortSpecifier":{"PortValue":64544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c954d879-d082-4e33-bf75-5495e0bb4755","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c954d879-d082-4e33-bf75-5495e0bb4755","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64544","PortSpecifier":{"PortValue":64544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973858,"nanos":999024276},"http":{"id":"c954d879-d082-4e33-bf75-5495e0bb4755","method":"GET","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c954d879-d082-4e33-bf75-5495e0bb4755","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OsxFKQAerjPVQiIr_vhsQafGJBfbTWGjp62MPrcH2BecatQS07fhj6atDm7j"}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c954d879-d082-4e33-bf75-5495e0bb4755","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OsxFKQAerjPVQiIr_vhsQafGJBfbTWGjp62MPrcH2BecatQS07fhj6atDm7j\"}"}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c954d879-d082-4e33-bf75-5495e0bb4755","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c954d879-d082-4e33-bf75-5495e0bb4755","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c954d879-d082-4e33-bf75-5495e0bb4755","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c954d879-d082-4e33-bf75-5495e0bb4755","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c954d879-d082-4e33-bf75-5495e0bb4755","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c954d879-d082-4e33-bf75-5495e0bb4755","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c954d879-d082-4e33-bf75-5495e0bb4755","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9420e38c-dc3b-464d-85ae-d7988a67f639","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:38608","PortSpecifier":{"PortValue":38608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9420e38c-dc3b-464d-85ae-d7988a67f639","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9420e38c-dc3b-464d-85ae-d7988a67f639","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:38608","PortSpecifier":{"PortValue":38608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973859,"nanos":3495548},"http":{"id":"9420e38c-dc3b-464d-85ae-d7988a67f639","method":"GET","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9420e38c-dc3b-464d-85ae-d7988a67f639","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OsxFKQAerjPVQiIr_vhsQafGJBfbTWGjp62MPrcH2BecatQS07fhj6atDm7j"}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9420e38c-dc3b-464d-85ae-d7988a67f639","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OsxFKQAerjPVQiIr_vhsQafGJBfbTWGjp62MPrcH2BecatQS07fhj6atDm7j\"}"}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9420e38c-dc3b-464d-85ae-d7988a67f639","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9420e38c-dc3b-464d-85ae-d7988a67f639","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9420e38c-dc3b-464d-85ae-d7988a67f639","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9420e38c-dc3b-464d-85ae-d7988a67f639","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-1OsxFKQAerjPVQiIr_vhsQafGJBfbTWGjp62MPrcH2BecatQS07fhj6atDm7j","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.43","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.38~maas-default-gateway-openshift-default-687ff6996-g75fn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.134.0.43","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"9420e38c-dc3b-464d-85ae-d7988a67f639"},"host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","id":"9420e38c-dc3b-464d-85ae-d7988a67f639","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":3495548,"seconds":1780973859},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.134.0.43:38608","port":38608}}}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9420e38c-dc3b-464d-85ae-d7988a67f639","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9420e38c-dc3b-464d-85ae-d7988a67f639","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9420e38c-dc3b-464d-85ae-d7988a67f639","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9420e38c-dc3b-464d-85ae-d7988a67f639","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9420e38c-dc3b-464d-85ae-d7988a67f639","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9420e38c-dc3b-464d-85ae-d7988a67f639","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"d39ccc3a-d107-4da1-acec-1fcce7459d7d","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9420e38c-dc3b-464d-85ae-d7988a67f639","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9420e38c-dc3b-464d-85ae-d7988a67f639","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97a96444-4ffe-4856-8c51-913191e1b650","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:47542","PortSpecifier":{"PortValue":47542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97a96444-4ffe-4856-8c51-913191e1b650","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97a96444-4ffe-4856-8c51-913191e1b650","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:47542","PortSpecifier":{"PortValue":47542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780973859,"nanos":91793761},"http":{"id":"97a96444-4ffe-4856-8c51-913191e1b650","method":"POST","headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97a96444-4ffe-4856-8c51-913191e1b650","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974159,"groups":["Engineering","Project-Alpha"],"iat":1780973859,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:d921f572-5053-21d7-b288-142f910827cd","preferred_username":"alice_lead","scope":"profile email","sid":"_AHdJ3S4_t0ESOR59dJ-NHyk","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97a96444-4ffe-4856-8c51-913191e1b650","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780974159,"groups":["Engineering","Project-Alpha"],"iat":1780973859,"iss":"https://keycloak.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:d921f572-5053-21d7-b288-142f910827cd","preferred_username":"alice_lead","scope":"profile email","sid":"_AHdJ3S4_t0ESOR59dJ-NHyk","sub":"db9444b6-8b04-4282-ae5b-36ced703dd9e","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.246b15bc-bdc1-40b0-9c57-ab80234702e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97a96444-4ffe-4856-8c51-913191e1b650","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97a96444-4ffe-4856-8c51-913191e1b650","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97a96444-4ffe-4856-8c51-913191e1b650","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97a96444-4ffe-4856-8c51-913191e1b650","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T02:57:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97a96444-4ffe-4856-8c51-913191e1b650","authorized":true,"response":"OK"}