{"level":"debug","ts":"2026-06-11T10:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T10:41:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T10:41:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-11T10:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-11T10:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"776de0a1-0639-481c-8b4a-d312a2b607c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64472","PortSpecifier":{"PortValue":64472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"776de0a1-0639-481c-8b4a-d312a2b607c3","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"776de0a1-0639-481c-8b4a-d312a2b607c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64472","PortSpecifier":{"PortValue":64472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174505,"nanos":364034041},"http":{"id":"776de0a1-0639-481c-8b4a-d312a2b607c3","method":"POST","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"776de0a1-0639-481c-8b4a-d312a2b607c3","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"776de0a1-0639-481c-8b4a-d312a2b607c3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"776de0a1-0639-481c-8b4a-d312a2b607c3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"94746080-8dfd-4e2b-a01f-a94588eb2424","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5febc7eb-d7e2-4a08-9d93-afd756fc14fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3dae96723d8c"]}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"776de0a1-0639-481c-8b4a-d312a2b607c3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3dae96723d8c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5febc7eb-d7e2-4a08-9d93-afd756fc14fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"94746080-8dfd-4e2b-a01f-a94588eb2424","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"776de0a1-0639-481c-8b4a-d312a2b607c3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"776de0a1-0639-481c-8b4a-d312a2b607c3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"776de0a1-0639-481c-8b4a-d312a2b607c3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"776de0a1-0639-481c-8b4a-d312a2b607c3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1701fbf9-4625-46a2-ba69-fbf31dba1ce2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:13698","PortSpecifier":{"PortValue":13698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1701fbf9-4625-46a2-ba69-fbf31dba1ce2","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1701fbf9-4625-46a2-ba69-fbf31dba1ce2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:13698","PortSpecifier":{"PortValue":13698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174505,"nanos":413103618},"http":{"id":"1701fbf9-4625-46a2-ba69-fbf31dba1ce2","method":"POST","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1701fbf9-4625-46a2-ba69-fbf31dba1ce2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uE8Zyh43dizgBG68_i9UwtUwWmXkEYZ2DNoKLogC2lb2SiVTqizhqGKftOf0"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1701fbf9-4625-46a2-ba69-fbf31dba1ce2","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uE8Zyh43dizgBG68_i9UwtUwWmXkEYZ2DNoKLogC2lb2SiVTqizhqGKftOf0\"}"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1701fbf9-4625-46a2-ba69-fbf31dba1ce2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1701fbf9-4625-46a2-ba69-fbf31dba1ce2","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-central-models-exempt-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1701fbf9-4625-46a2-ba69-fbf31dba1ce2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1701fbf9-4625-46a2-ba69-fbf31dba1ce2","input":{"auth":{"identity":"Bearer **** with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1701fbf9-4625-46a2-ba69-fbf31dba1ce2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1701fbf9-4625-46a2-ba69-fbf31dba1ce2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1701fbf9-4625-46a2-ba69-fbf31dba1ce2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1701fbf9-4625-46a2-ba69-fbf31dba1ce2","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1701fbf9-4625-46a2-ba69-fbf31dba1ce2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1701fbf9-4625-46a2-ba69-fbf31dba1ce2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c571c1a6-c18a-469f-a7c9-4efb242c6d2b","selected_subscription":"e2e-central-models-exempt-sub","selected_subscription_key":"models-as-a-service/e2e-central-models-exempt-sub@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1701fbf9-4625-46a2-ba69-fbf31dba1ce2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1701fbf9-4625-46a2-ba69-fbf31dba1ce2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1237816-1c5f-4211-bdd9-9fee135e629f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49730","PortSpecifier":{"PortValue":49730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1237816-1c5f-4211-bdd9-9fee135e629f","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1237816-1c5f-4211-bdd9-9fee135e629f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49730","PortSpecifier":{"PortValue":49730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174505,"nanos":445318066},"http":{"id":"f1237816-1c5f-4211-bdd9-9fee135e629f","method":"POST","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1237816-1c5f-4211-bdd9-9fee135e629f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uE8Zyh43dizgBG68_i9UwtUwWmXkEYZ2DNoKLogC2lb2SiVTqizhqGKftOf0"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1237816-1c5f-4211-bdd9-9fee135e629f","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uE8Zyh43dizgBG68_i9UwtUwWmXkEYZ2DNoKLogC2lb2SiVTqizhqGKftOf0\"}"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1237816-1c5f-4211-bdd9-9fee135e629f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1237816-1c5f-4211-bdd9-9fee135e629f","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-central-models-exempt-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1237816-1c5f-4211-bdd9-9fee135e629f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1237816-1c5f-4211-bdd9-9fee135e629f","input":{"auth":{"identity":"Bearer **** with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1237816-1c5f-4211-bdd9-9fee135e629f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1237816-1c5f-4211-bdd9-9fee135e629f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1237816-1c5f-4211-bdd9-9fee135e629f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1237816-1c5f-4211-bdd9-9fee135e629f","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1237816-1c5f-4211-bdd9-9fee135e629f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1237816-1c5f-4211-bdd9-9fee135e629f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c571c1a6-c18a-469f-a7c9-4efb242c6d2b","selected_subscription":"e2e-central-models-exempt-sub","selected_subscription_key":"models-as-a-service/e2e-central-models-exempt-sub@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1237816-1c5f-4211-bdd9-9fee135e629f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1237816-1c5f-4211-bdd9-9fee135e629f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d723c50-61be-4e76-becf-65cc763f10d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64480","PortSpecifier":{"PortValue":64480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d723c50-61be-4e76-becf-65cc763f10d8","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d723c50-61be-4e76-becf-65cc763f10d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64480","PortSpecifier":{"PortValue":64480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174505,"nanos":478942884},"http":{"id":"0d723c50-61be-4e76-becf-65cc763f10d8","method":"POST","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d723c50-61be-4e76-becf-65cc763f10d8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uE8Zyh43dizgBG68_i9UwtUwWmXkEYZ2DNoKLogC2lb2SiVTqizhqGKftOf0"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d723c50-61be-4e76-becf-65cc763f10d8","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uE8Zyh43dizgBG68_i9UwtUwWmXkEYZ2DNoKLogC2lb2SiVTqizhqGKftOf0\"}"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d723c50-61be-4e76-becf-65cc763f10d8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d723c50-61be-4e76-becf-65cc763f10d8","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-central-models-exempt-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d723c50-61be-4e76-becf-65cc763f10d8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d723c50-61be-4e76-becf-65cc763f10d8","input":{"auth":{"identity":"Bearer **** with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d723c50-61be-4e76-becf-65cc763f10d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d723c50-61be-4e76-becf-65cc763f10d8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d723c50-61be-4e76-becf-65cc763f10d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d723c50-61be-4e76-becf-65cc763f10d8","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d723c50-61be-4e76-becf-65cc763f10d8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d723c50-61be-4e76-becf-65cc763f10d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c571c1a6-c18a-469f-a7c9-4efb242c6d2b","selected_subscription":"e2e-central-models-exempt-sub","selected_subscription_key":"models-as-a-service/e2e-central-models-exempt-sub@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d723c50-61be-4e76-becf-65cc763f10d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d723c50-61be-4e76-becf-65cc763f10d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"155f8704-70ac-4cfa-b121-2c39be2babc1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:13702","PortSpecifier":{"PortValue":13702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"155f8704-70ac-4cfa-b121-2c39be2babc1","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"155f8704-70ac-4cfa-b121-2c39be2babc1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:13702","PortSpecifier":{"PortValue":13702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174505,"nanos":507235122},"http":{"id":"155f8704-70ac-4cfa-b121-2c39be2babc1","method":"POST","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"155f8704-70ac-4cfa-b121-2c39be2babc1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uE8Zyh43dizgBG68_i9UwtUwWmXkEYZ2DNoKLogC2lb2SiVTqizhqGKftOf0"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"155f8704-70ac-4cfa-b121-2c39be2babc1","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uE8Zyh43dizgBG68_i9UwtUwWmXkEYZ2DNoKLogC2lb2SiVTqizhqGKftOf0\"}"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"155f8704-70ac-4cfa-b121-2c39be2babc1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"155f8704-70ac-4cfa-b121-2c39be2babc1","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-central-models-exempt-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"155f8704-70ac-4cfa-b121-2c39be2babc1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"155f8704-70ac-4cfa-b121-2c39be2babc1","input":{"auth":{"identity":"Bearer **** with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"155f8704-70ac-4cfa-b121-2c39be2babc1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"155f8704-70ac-4cfa-b121-2c39be2babc1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"155f8704-70ac-4cfa-b121-2c39be2babc1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"155f8704-70ac-4cfa-b121-2c39be2babc1","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"155f8704-70ac-4cfa-b121-2c39be2babc1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"155f8704-70ac-4cfa-b121-2c39be2babc1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c571c1a6-c18a-469f-a7c9-4efb242c6d2b","selected_subscription":"e2e-central-models-exempt-sub","selected_subscription_key":"models-as-a-service/e2e-central-models-exempt-sub@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"155f8704-70ac-4cfa-b121-2c39be2babc1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"155f8704-70ac-4cfa-b121-2c39be2babc1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c625a1e2-3940-475f-8b3b-2da93b85e261","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49740","PortSpecifier":{"PortValue":49740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c625a1e2-3940-475f-8b3b-2da93b85e261","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c625a1e2-3940-475f-8b3b-2da93b85e261","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49740","PortSpecifier":{"PortValue":49740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174505,"nanos":532232860},"http":{"id":"c625a1e2-3940-475f-8b3b-2da93b85e261","method":"GET","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c625a1e2-3940-475f-8b3b-2da93b85e261","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uE8Zyh43dizgBG68_i9UwtUwWmXkEYZ2DNoKLogC2lb2SiVTqizhqGKftOf0"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c625a1e2-3940-475f-8b3b-2da93b85e261","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uE8Zyh43dizgBG68_i9UwtUwWmXkEYZ2DNoKLogC2lb2SiVTqizhqGKftOf0\"}"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c625a1e2-3940-475f-8b3b-2da93b85e261","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c625a1e2-3940-475f-8b3b-2da93b85e261","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c625a1e2-3940-475f-8b3b-2da93b85e261","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c625a1e2-3940-475f-8b3b-2da93b85e261","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c625a1e2-3940-475f-8b3b-2da93b85e261","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c625a1e2-3940-475f-8b3b-2da93b85e261","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c625a1e2-3940-475f-8b3b-2da93b85e261","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c74af95-22f9-4919-9d26-1e3a84fba31c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:51032","PortSpecifier":{"PortValue":51032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c74af95-22f9-4919-9d26-1e3a84fba31c","method":"GET","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c74af95-22f9-4919-9d26-1e3a84fba31c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:51032","PortSpecifier":{"PortValue":51032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174505,"nanos":537862072},"http":{"id":"1c74af95-22f9-4919-9d26-1e3a84fba31c","method":"GET","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c74af95-22f9-4919-9d26-1e3a84fba31c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uE8Zyh43dizgBG68_i9UwtUwWmXkEYZ2DNoKLogC2lb2SiVTqizhqGKftOf0"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1c74af95-22f9-4919-9d26-1e3a84fba31c","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uE8Zyh43dizgBG68_i9UwtUwWmXkEYZ2DNoKLogC2lb2SiVTqizhqGKftOf0\"}"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1c74af95-22f9-4919-9d26-1e3a84fba31c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1c74af95-22f9-4919-9d26-1e3a84fba31c","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-central-models-exempt-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1c74af95-22f9-4919-9d26-1e3a84fba31c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c74af95-22f9-4919-9d26-1e3a84fba31c","input":{"auth":{"identity":"Bearer **** with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-uE8Zyh43dizgBG68_i9UwtUwWmXkEYZ2DNoKLogC2lb2SiVTqizhqGKftOf0","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"e2e-unconfiab60ef4d3a239b5143b412cab04acac3-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.32","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.42~maas-default-gateway-openshift-default-8559cd5744-vrxfd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.133.0.32","x-forwarded-proto":"https","x-maas-subscription":"e2e-central-models-exempt-sub","x-request-id":"1c74af95-22f9-4919-9d26-1e3a84fba31c"},"host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","id":"1c74af95-22f9-4919-9d26-1e3a84fba31c","method":"GET","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":537862072,"seconds":1781174505},"url_path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.133.0.32:51032","port":51032}}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c74af95-22f9-4919-9d26-1e3a84fba31c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c74af95-22f9-4919-9d26-1e3a84fba31c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c74af95-22f9-4919-9d26-1e3a84fba31c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c74af95-22f9-4919-9d26-1e3a84fba31c","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c74af95-22f9-4919-9d26-1e3a84fba31c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c74af95-22f9-4919-9d26-1e3a84fba31c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c571c1a6-c18a-469f-a7c9-4efb242c6d2b","selected_subscription":"e2e-central-models-exempt-sub","selected_subscription_key":"models-as-a-service/e2e-central-models-exempt-sub@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c74af95-22f9-4919-9d26-1e3a84fba31c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:41:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c74af95-22f9-4919-9d26-1e3a84fba31c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T10:41:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T10:41:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T10:41:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T10:41:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T10:41:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T10:41:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T10:41:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-11T10:41:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22d45d00-3c9f-4f39-9992-919165f4f8bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51180","PortSpecifier":{"PortValue":51180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22d45d00-3c9f-4f39-9992-919165f4f8bb","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22d45d00-3c9f-4f39-9992-919165f4f8bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51180","PortSpecifier":{"PortValue":51180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174542,"nanos":803920493},"http":{"id":"22d45d00-3c9f-4f39-9992-919165f4f8bb","method":"POST","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22d45d00-3c9f-4f39-9992-919165f4f8bb","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174842,"groups":["Engineering","Project-Alpha"],"iat":1781174542,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:9e75433c-2db7-36b4-1bdd-7dd7ce49bc0c","preferred_username":"alice_lead","scope":"email profile","sid":"7_2EVz9M0DDH03o2WkM5xGXP","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22d45d00-3c9f-4f39-9992-919165f4f8bb","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174842,"groups":["Engineering","Project-Alpha"],"iat":1781174542,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:9e75433c-2db7-36b4-1bdd-7dd7ce49bc0c","preferred_username":"alice_lead","scope":"email profile","sid":"7_2EVz9M0DDH03o2WkM5xGXP","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22d45d00-3c9f-4f39-9992-919165f4f8bb","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22d45d00-3c9f-4f39-9992-919165f4f8bb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22d45d00-3c9f-4f39-9992-919165f4f8bb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22d45d00-3c9f-4f39-9992-919165f4f8bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22d45d00-3c9f-4f39-9992-919165f4f8bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c41e0e87-f57a-4ae5-a885-517f75cbfab5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8540","PortSpecifier":{"PortValue":8540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c41e0e87-f57a-4ae5-a885-517f75cbfab5","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c41e0e87-f57a-4ae5-a885-517f75cbfab5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8540","PortSpecifier":{"PortValue":8540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174542,"nanos":899554192},"http":{"id":"c41e0e87-f57a-4ae5-a885-517f75cbfab5","method":"POST","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c41e0e87-f57a-4ae5-a885-517f75cbfab5","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c41e0e87-f57a-4ae5-a885-517f75cbfab5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c41e0e87-f57a-4ae5-a885-517f75cbfab5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"not authenticated"}
{"level":"info","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c41e0e87-f57a-4ae5-a885-517f75cbfab5","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}"}}
{"level":"debug","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c41e0e87-f57a-4ae5-a885-517f75cbfab5","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"983f2c35-d443-4043-be7a-b7568f054e4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:60098","PortSpecifier":{"PortValue":60098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"983f2c35-d443-4043-be7a-b7568f054e4d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"983f2c35-d443-4043-be7a-b7568f054e4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:60098","PortSpecifier":{"PortValue":60098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174542,"nanos":942240638},"http":{"id":"983f2c35-d443-4043-be7a-b7568f054e4d","method":"POST","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer","content-length":"35","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.42~maas-default-gateway-openshift-default-8559cd5744-vrxfd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-request-id":"983f2c35-d443-4043-be7a-b7568f054e4d"},"path":"/maas-api/v1/api-keys","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"metadata_context":{}}}
{"level":"debug","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"983f2c35-d443-4043-be7a-b7568f054e4d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"credential not found"}
{"level":"info","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"983f2c35-d443-4043-be7a-b7568f054e4d","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"openshift-identities\":\"credential not found\"}"}}
{"level":"debug","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"983f2c35-d443-4043-be7a-b7568f054e4d","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"openshift-identities\":\"credential not found\"}","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c506dc8-f1d3-4025-aea9-c2371f1df15f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51188","PortSpecifier":{"PortValue":51188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c506dc8-f1d3-4025-aea9-c2371f1df15f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c506dc8-f1d3-4025-aea9-c2371f1df15f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51188","PortSpecifier":{"PortValue":51188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174542,"nanos":967494286},"http":{"id":"2c506dc8-f1d3-4025-aea9-c2371f1df15f","method":"POST","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-length":"36","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.42~maas-default-gateway-openshift-default-8559cd5744-vrxfd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-request-id":"2c506dc8-f1d3-4025-aea9-c2371f1df15f"},"path":"/maas-api/v1/api-keys","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"metadata_context":{}}}
{"level":"info","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c506dc8-f1d3-4025-aea9-c2371f1df15f","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}"}}
{"level":"debug","ts":"2026-06-11T10:42:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c506dc8-f1d3-4025-aea9-c2371f1df15f","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65fc8132-0ff1-48b4-b701-b1649a485151","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8554","PortSpecifier":{"PortValue":8554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65fc8132-0ff1-48b4-b701-b1649a485151","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65fc8132-0ff1-48b4-b701-b1649a485151","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8554","PortSpecifier":{"PortValue":8554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174543,"nanos":331748402},"http":{"id":"65fc8132-0ff1-48b4-b701-b1649a485151","method":"POST","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65fc8132-0ff1-48b4-b701-b1649a485151","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174843,"groups":["Site-Reliability"],"iat":1781174543,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:34f1c6eb-e864-6161-0bda-5495b0f91bed","preferred_username":"bob_sre","scope":"email profile","sid":"GWsOf9DGxk3h1yGIAMZT6HJU","sub":"046a77aa-9b6b-4586-b24c-02d6c318541d","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65fc8132-0ff1-48b4-b701-b1649a485151","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174843,"groups":["Site-Reliability"],"iat":1781174543,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:34f1c6eb-e864-6161-0bda-5495b0f91bed","preferred_username":"bob_sre","scope":"email profile","sid":"GWsOf9DGxk3h1yGIAMZT6HJU","sub":"046a77aa-9b6b-4586-b24c-02d6c318541d","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65fc8132-0ff1-48b4-b701-b1649a485151","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65fc8132-0ff1-48b4-b701-b1649a485151","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65fc8132-0ff1-48b4-b701-b1649a485151","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"}
{"level":"info","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65fc8132-0ff1-48b4-b701-b1649a485151","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65fc8132-0ff1-48b4-b701-b1649a485151","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fac04fd-7463-46ed-89de-07fcc8c7e9c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:60112","PortSpecifier":{"PortValue":60112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fac04fd-7463-46ed-89de-07fcc8c7e9c3","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fac04fd-7463-46ed-89de-07fcc8c7e9c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:60112","PortSpecifier":{"PortValue":60112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174543,"nanos":549412843},"http":{"id":"7fac04fd-7463-46ed-89de-07fcc8c7e9c3","method":"POST","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7fac04fd-7463-46ed-89de-07fcc8c7e9c3","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174843,"groups":["Engineering","Project-Alpha"],"iat":1781174543,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8571f01f-d53a-f60c-e9c7-fa75ff0d0f3a","preferred_username":"alice_lead","scope":"email profile","sid":"hI95uKeDMRPD99TpTr-vaC45","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7fac04fd-7463-46ed-89de-07fcc8c7e9c3","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174843,"groups":["Engineering","Project-Alpha"],"iat":1781174543,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8571f01f-d53a-f60c-e9c7-fa75ff0d0f3a","preferred_username":"alice_lead","scope":"email profile","sid":"hI95uKeDMRPD99TpTr-vaC45","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fac04fd-7463-46ed-89de-07fcc8c7e9c3","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fac04fd-7463-46ed-89de-07fcc8c7e9c3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fac04fd-7463-46ed-89de-07fcc8c7e9c3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fac04fd-7463-46ed-89de-07fcc8c7e9c3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fac04fd-7463-46ed-89de-07fcc8c7e9c3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee401832-f99b-4869-8bef-20857519f74c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51190","PortSpecifier":{"PortValue":51190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee401832-f99b-4869-8bef-20857519f74c","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee401832-f99b-4869-8bef-20857519f74c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51190","PortSpecifier":{"PortValue":51190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174543,"nanos":577566703},"http":{"id":"ee401832-f99b-4869-8bef-20857519f74c","method":"GET","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee401832-f99b-4869-8bef-20857519f74c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RgC4vDznewPahdmk_uC4Ql5GUkzos2LuIY49YJWXlpxyRjmvTnsh8x7A3zXe"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ee401832-f99b-4869-8bef-20857519f74c","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RgC4vDznewPahdmk_uC4Ql5GUkzos2LuIY49YJWXlpxyRjmvTnsh8x7A3zXe\"}"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ee401832-f99b-4869-8bef-20857519f74c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee401832-f99b-4869-8bef-20857519f74c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee401832-f99b-4869-8bef-20857519f74c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee401832-f99b-4869-8bef-20857519f74c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee401832-f99b-4869-8bef-20857519f74c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee401832-f99b-4869-8bef-20857519f74c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee401832-f99b-4869-8bef-20857519f74c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9eb8ced3-19eb-4e67-b6ee-06426bd854a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:51032","PortSpecifier":{"PortValue":51032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9eb8ced3-19eb-4e67-b6ee-06426bd854a5","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9eb8ced3-19eb-4e67-b6ee-06426bd854a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:51032","PortSpecifier":{"PortValue":51032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174543,"nanos":582920362},"http":{"id":"9eb8ced3-19eb-4e67-b6ee-06426bd854a5","method":"GET","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9eb8ced3-19eb-4e67-b6ee-06426bd854a5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RgC4vDznewPahdmk_uC4Ql5GUkzos2LuIY49YJWXlpxyRjmvTnsh8x7A3zXe"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9eb8ced3-19eb-4e67-b6ee-06426bd854a5","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RgC4vDznewPahdmk_uC4Ql5GUkzos2LuIY49YJWXlpxyRjmvTnsh8x7A3zXe\"}"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9eb8ced3-19eb-4e67-b6ee-06426bd854a5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9eb8ced3-19eb-4e67-b6ee-06426bd854a5","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9eb8ced3-19eb-4e67-b6ee-06426bd854a5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9eb8ced3-19eb-4e67-b6ee-06426bd854a5","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-RgC4vDznewPahdmk_uC4Ql5GUkzos2LuIY49YJWXlpxyRjmvTnsh8x7A3zXe","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.32","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC04NTU5Y2Q1NzQ0LXZyeGZkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.134.0.42~maas-default-gateway-openshift-default-8559cd5744-vrxfd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.133.0.32","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"9eb8ced3-19eb-4e67-b6ee-06426bd854a5"},"host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","id":"9eb8ced3-19eb-4e67-b6ee-06426bd854a5","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":582920362,"seconds":1781174543},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.133.0.32:51032","port":51032}}}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9eb8ced3-19eb-4e67-b6ee-06426bd854a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9eb8ced3-19eb-4e67-b6ee-06426bd854a5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9eb8ced3-19eb-4e67-b6ee-06426bd854a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9eb8ced3-19eb-4e67-b6ee-06426bd854a5","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9eb8ced3-19eb-4e67-b6ee-06426bd854a5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9eb8ced3-19eb-4e67-b6ee-06426bd854a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"4b077975-038c-4e18-9a74-7cdfa1499145","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9eb8ced3-19eb-4e67-b6ee-06426bd854a5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9eb8ced3-19eb-4e67-b6ee-06426bd854a5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0c6a6a9-280b-484d-9f76-178210051f0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8566","PortSpecifier":{"PortValue":8566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e0c6a6a9-280b-484d-9f76-178210051f0b","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0c6a6a9-280b-484d-9f76-178210051f0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8566","PortSpecifier":{"PortValue":8566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174543,"nanos":612898614},"http":{"id":"e0c6a6a9-280b-484d-9f76-178210051f0b","method":"POST","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e0c6a6a9-280b-484d-9f76-178210051f0b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RgC4vDznewPahdmk_uC4Ql5GUkzos2LuIY49YJWXlpxyRjmvTnsh8x7A3zXe"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e0c6a6a9-280b-484d-9f76-178210051f0b","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RgC4vDznewPahdmk_uC4Ql5GUkzos2LuIY49YJWXlpxyRjmvTnsh8x7A3zXe\"}"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e0c6a6a9-280b-484d-9f76-178210051f0b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e0c6a6a9-280b-484d-9f76-178210051f0b","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e0c6a6a9-280b-484d-9f76-178210051f0b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e0c6a6a9-280b-484d-9f76-178210051f0b","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0c6a6a9-280b-484d-9f76-178210051f0b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0c6a6a9-280b-484d-9f76-178210051f0b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0c6a6a9-280b-484d-9f76-178210051f0b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0c6a6a9-280b-484d-9f76-178210051f0b","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0c6a6a9-280b-484d-9f76-178210051f0b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0c6a6a9-280b-484d-9f76-178210051f0b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"4b077975-038c-4e18-9a74-7cdfa1499145","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0c6a6a9-280b-484d-9f76-178210051f0b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0c6a6a9-280b-484d-9f76-178210051f0b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96045763-8e43-414e-a895-80b51c9ac33c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:20230","PortSpecifier":{"PortValue":20230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96045763-8e43-414e-a895-80b51c9ac33c","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96045763-8e43-414e-a895-80b51c9ac33c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:20230","PortSpecifier":{"PortValue":20230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174543,"nanos":709454705},"http":{"id":"96045763-8e43-414e-a895-80b51c9ac33c","method":"POST","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96045763-8e43-414e-a895-80b51c9ac33c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174843,"groups":["Engineering","Project-Alpha"],"iat":1781174543,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:0bc4eb16-fd02-7f08-051a-8cd9880438d8","preferred_username":"alice_lead","scope":"email profile","sid":"snNGDLauLJng4rZRx-gNDJYy","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96045763-8e43-414e-a895-80b51c9ac33c","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174843,"groups":["Engineering","Project-Alpha"],"iat":1781174543,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:0bc4eb16-fd02-7f08-051a-8cd9880438d8","preferred_username":"alice_lead","scope":"email profile","sid":"snNGDLauLJng4rZRx-gNDJYy","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96045763-8e43-414e-a895-80b51c9ac33c","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96045763-8e43-414e-a895-80b51c9ac33c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96045763-8e43-414e-a895-80b51c9ac33c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96045763-8e43-414e-a895-80b51c9ac33c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96045763-8e43-414e-a895-80b51c9ac33c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63bcb48c-ead2-46e8-979e-c01ce526611e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:60118","PortSpecifier":{"PortValue":60118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63bcb48c-ead2-46e8-979e-c01ce526611e","method":"DELETE","path":"/maas-api/v1/api-keys/c1bcc76c-9be9-4cbd-8db3-be1a9d9b4016","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63bcb48c-ead2-46e8-979e-c01ce526611e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:60118","PortSpecifier":{"PortValue":60118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174543,"nanos":737382051},"http":{"id":"63bcb48c-ead2-46e8-979e-c01ce526611e","method":"DELETE","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/c1bcc76c-9be9-4cbd-8db3-be1a9d9b4016",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63bcb48c-ead2-46e8-979e-c01ce526611e","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174843,"groups":["Engineering","Project-Alpha"],"iat":1781174543,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:0bc4eb16-fd02-7f08-051a-8cd9880438d8","preferred_username":"alice_lead","scope":"email profile","sid":"snNGDLauLJng4rZRx-gNDJYy","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63bcb48c-ead2-46e8-979e-c01ce526611e","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174843,"groups":["Engineering","Project-Alpha"],"iat":1781174543,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:0bc4eb16-fd02-7f08-051a-8cd9880438d8","preferred_username":"alice_lead","scope":"email profile","sid":"snNGDLauLJng4rZRx-gNDJYy","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/c1bcc76c-9be9-4cbd-8db3-be1a9d9b4016",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63bcb48c-ead2-46e8-979e-c01ce526611e","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63bcb48c-ead2-46e8-979e-c01ce526611e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63bcb48c-ead2-46e8-979e-c01ce526611e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63bcb48c-ead2-46e8-979e-c01ce526611e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63bcb48c-ead2-46e8-979e-c01ce526611e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0c32949-ba8b-4f31-8c50-3ef5b882d357","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51204","PortSpecifier":{"PortValue":51204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0c32949-ba8b-4f31-8c50-3ef5b882d357","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0c32949-ba8b-4f31-8c50-3ef5b882d357","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51204","PortSpecifier":{"PortValue":51204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174546,"nanos":770042405},"http":{"id":"c0c32949-ba8b-4f31-8c50-3ef5b882d357","method":"GET","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0c32949-ba8b-4f31-8c50-3ef5b882d357","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NW6k8ttZJ1YNUKWX_4g2XBssPiu8odGnnLCjKBYIaPMNG4dBHMTnBhjvHpEl"}
{"level":"debug","ts":"2026-06-11T10:42:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c0c32949-ba8b-4f31-8c50-3ef5b882d357","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NW6k8ttZJ1YNUKWX_4g2XBssPiu8odGnnLCjKBYIaPMNG4dBHMTnBhjvHpEl\"}"}
{"level":"debug","ts":"2026-06-11T10:42:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c0c32949-ba8b-4f31-8c50-3ef5b882d357","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}}
{"level":"debug","ts":"2026-06-11T10:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0c32949-ba8b-4f31-8c50-3ef5b882d357","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c0c32949-ba8b-4f31-8c50-3ef5b882d357","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-06-11T10:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c0c32949-ba8b-4f31-8c50-3ef5b882d357","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"no such key: username"}
{"level":"info","ts":"2026-06-11T10:42:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0c32949-ba8b-4f31-8c50-3ef5b882d357","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0c32949-ba8b-4f31-8c50-3ef5b882d357","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"745744fb-22e9-4a14-834a-3e3fb9a99e53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51328","PortSpecifier":{"PortValue":51328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"745744fb-22e9-4a14-834a-3e3fb9a99e53","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"745744fb-22e9-4a14-834a-3e3fb9a99e53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51328","PortSpecifier":{"PortValue":51328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174546,"nanos":904387500},"http":{"id":"745744fb-22e9-4a14-834a-3e3fb9a99e53","method":"POST","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"745744fb-22e9-4a14-834a-3e3fb9a99e53","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-11T10:42:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"745744fb-22e9-4a14-834a-3e3fb9a99e53","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-11T10:42:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"745744fb-22e9-4a14-834a-3e3fb9a99e53","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"not authenticated"}
{"level":"info","ts":"2026-06-11T10:42:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"745744fb-22e9-4a14-834a-3e3fb9a99e53","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}"}}
{"level":"debug","ts":"2026-06-11T10:42:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"745744fb-22e9-4a14-834a-3e3fb9a99e53","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15112375-d2fd-46a5-8ac5-12d48db359bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8572","PortSpecifier":{"PortValue":8572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15112375-d2fd-46a5-8ac5-12d48db359bf","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15112375-d2fd-46a5-8ac5-12d48db359bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8572","PortSpecifier":{"PortValue":8572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174547,"nanos":62239115},"http":{"id":"15112375-d2fd-46a5-8ac5-12d48db359bf","method":"POST","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15112375-d2fd-46a5-8ac5-12d48db359bf","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174846,"groups":["Engineering","Project-Alpha"],"iat":1781174546,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8f0978a8-6414-301f-7b98-55e59aab3687","preferred_username":"alice_lead","scope":"email profile","sid":"iIBMBccqjaH97lTf0YIoPcWj","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15112375-d2fd-46a5-8ac5-12d48db359bf","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174846,"groups":["Engineering","Project-Alpha"],"iat":1781174546,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8f0978a8-6414-301f-7b98-55e59aab3687","preferred_username":"alice_lead","scope":"email profile","sid":"iIBMBccqjaH97lTf0YIoPcWj","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15112375-d2fd-46a5-8ac5-12d48db359bf","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15112375-d2fd-46a5-8ac5-12d48db359bf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15112375-d2fd-46a5-8ac5-12d48db359bf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15112375-d2fd-46a5-8ac5-12d48db359bf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15112375-d2fd-46a5-8ac5-12d48db359bf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b6a1fb8-3d04-4913-82c2-7bd56e465a77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:60124","PortSpecifier":{"PortValue":60124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b6a1fb8-3d04-4913-82c2-7bd56e465a77","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b6a1fb8-3d04-4913-82c2-7bd56e465a77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:60124","PortSpecifier":{"PortValue":60124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174547,"nanos":89780122},"http":{"id":"0b6a1fb8-3d04-4913-82c2-7bd56e465a77","method":"POST","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b6a1fb8-3d04-4913-82c2-7bd56e465a77","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174847,"groups":["Site-Reliability"],"iat":1781174547,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:c3b961d7-cd2b-6682-13e9-eac6d610aa10","preferred_username":"bob_sre","scope":"email profile","sid":"M4hq5KBZbP5ILYOm7hcz0hXO","sub":"046a77aa-9b6b-4586-b24c-02d6c318541d","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b6a1fb8-3d04-4913-82c2-7bd56e465a77","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174847,"groups":["Site-Reliability"],"iat":1781174547,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:c3b961d7-cd2b-6682-13e9-eac6d610aa10","preferred_username":"bob_sre","scope":"email profile","sid":"M4hq5KBZbP5ILYOm7hcz0hXO","sub":"046a77aa-9b6b-4586-b24c-02d6c318541d","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b6a1fb8-3d04-4913-82c2-7bd56e465a77","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b6a1fb8-3d04-4913-82c2-7bd56e465a77","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b6a1fb8-3d04-4913-82c2-7bd56e465a77","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b6a1fb8-3d04-4913-82c2-7bd56e465a77","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b6a1fb8-3d04-4913-82c2-7bd56e465a77","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6f6d2da-5324-4012-bb32-8d3fabdd8f68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51206","PortSpecifier":{"PortValue":51206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b6f6d2da-5324-4012-bb32-8d3fabdd8f68","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6f6d2da-5324-4012-bb32-8d3fabdd8f68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51206","PortSpecifier":{"PortValue":51206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174547,"nanos":191407152},"http":{"id":"b6f6d2da-5324-4012-bb32-8d3fabdd8f68","method":"POST","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b6f6d2da-5324-4012-bb32-8d3fabdd8f68","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174847,"groups":["Engineering","Project-Alpha"],"iat":1781174547,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:fe06af66-a279-de6c-8b5a-286d5313b0fd","preferred_username":"alice_lead","scope":"email profile","sid":"YXQzKuvj-KPnAj_z_4ENjoFG","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b6f6d2da-5324-4012-bb32-8d3fabdd8f68","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174847,"groups":["Engineering","Project-Alpha"],"iat":1781174547,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:fe06af66-a279-de6c-8b5a-286d5313b0fd","preferred_username":"alice_lead","scope":"email profile","sid":"YXQzKuvj-KPnAj_z_4ENjoFG","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6f6d2da-5324-4012-bb32-8d3fabdd8f68","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6f6d2da-5324-4012-bb32-8d3fabdd8f68","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6f6d2da-5324-4012-bb32-8d3fabdd8f68","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6f6d2da-5324-4012-bb32-8d3fabdd8f68","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6f6d2da-5324-4012-bb32-8d3fabdd8f68","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b64cda1-2dcb-4723-a423-adb1696825f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:24464","PortSpecifier":{"PortValue":24464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b64cda1-2dcb-4723-a423-adb1696825f5","method":"DELETE","path":"/maas-api/v1/api-keys/95d20df4-c0f3-4588-8885-2d925a80ab8d","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b64cda1-2dcb-4723-a423-adb1696825f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:24464","PortSpecifier":{"PortValue":24464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174547,"nanos":221669463},"http":{"id":"0b64cda1-2dcb-4723-a423-adb1696825f5","method":"DELETE","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/95d20df4-c0f3-4588-8885-2d925a80ab8d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b64cda1-2dcb-4723-a423-adb1696825f5","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174847,"groups":["Engineering","Project-Alpha"],"iat":1781174547,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:fe06af66-a279-de6c-8b5a-286d5313b0fd","preferred_username":"alice_lead","scope":"email profile","sid":"YXQzKuvj-KPnAj_z_4ENjoFG","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b64cda1-2dcb-4723-a423-adb1696825f5","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174847,"groups":["Engineering","Project-Alpha"],"iat":1781174547,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:fe06af66-a279-de6c-8b5a-286d5313b0fd","preferred_username":"alice_lead","scope":"email profile","sid":"YXQzKuvj-KPnAj_z_4ENjoFG","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/95d20df4-c0f3-4588-8885-2d925a80ab8d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b64cda1-2dcb-4723-a423-adb1696825f5","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b64cda1-2dcb-4723-a423-adb1696825f5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b64cda1-2dcb-4723-a423-adb1696825f5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b64cda1-2dcb-4723-a423-adb1696825f5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b64cda1-2dcb-4723-a423-adb1696825f5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4cb6f50-1159-4355-ae39-24f6f37a9f69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8578","PortSpecifier":{"PortValue":8578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4cb6f50-1159-4355-ae39-24f6f37a9f69","method":"DELETE","path":"/maas-api/v1/api-keys/95d20df4-c0f3-4588-8885-2d925a80ab8d","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4cb6f50-1159-4355-ae39-24f6f37a9f69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8578","PortSpecifier":{"PortValue":8578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174547,"nanos":246269928},"http":{"id":"f4cb6f50-1159-4355-ae39-24f6f37a9f69","method":"DELETE","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/95d20df4-c0f3-4588-8885-2d925a80ab8d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4cb6f50-1159-4355-ae39-24f6f37a9f69","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174847,"groups":["Engineering","Project-Alpha"],"iat":1781174547,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:fe06af66-a279-de6c-8b5a-286d5313b0fd","preferred_username":"alice_lead","scope":"email profile","sid":"YXQzKuvj-KPnAj_z_4ENjoFG","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4cb6f50-1159-4355-ae39-24f6f37a9f69","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174847,"groups":["Engineering","Project-Alpha"],"iat":1781174547,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:fe06af66-a279-de6c-8b5a-286d5313b0fd","preferred_username":"alice_lead","scope":"email profile","sid":"YXQzKuvj-KPnAj_z_4ENjoFG","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/95d20df4-c0f3-4588-8885-2d925a80ab8d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4cb6f50-1159-4355-ae39-24f6f37a9f69","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4cb6f50-1159-4355-ae39-24f6f37a9f69","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4cb6f50-1159-4355-ae39-24f6f37a9f69","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4cb6f50-1159-4355-ae39-24f6f37a9f69","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4cb6f50-1159-4355-ae39-24f6f37a9f69","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab1d4285-9b49-4792-a227-c8ed650fda2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:60138","PortSpecifier":{"PortValue":60138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab1d4285-9b49-4792-a227-c8ed650fda2c","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab1d4285-9b49-4792-a227-c8ed650fda2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:60138","PortSpecifier":{"PortValue":60138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174547,"nanos":337188784},"http":{"id":"ab1d4285-9b49-4792-a227-c8ed650fda2c","method":"POST","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab1d4285-9b49-4792-a227-c8ed650fda2c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174847,"groups":["Engineering","Project-Alpha"],"iat":1781174547,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:4805033a-d59b-55f5-3040-d5cc915a86f3","preferred_username":"alice_lead","scope":"email profile","sid":"C7BiL7Tsn-k0_gkZpPFbyQsa","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab1d4285-9b49-4792-a227-c8ed650fda2c","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174847,"groups":["Engineering","Project-Alpha"],"iat":1781174547,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:4805033a-d59b-55f5-3040-d5cc915a86f3","preferred_username":"alice_lead","scope":"email profile","sid":"C7BiL7Tsn-k0_gkZpPFbyQsa","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab1d4285-9b49-4792-a227-c8ed650fda2c","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab1d4285-9b49-4792-a227-c8ed650fda2c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab1d4285-9b49-4792-a227-c8ed650fda2c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab1d4285-9b49-4792-a227-c8ed650fda2c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab1d4285-9b49-4792-a227-c8ed650fda2c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acbc5458-8e67-482e-a2be-7ec1e3a98537","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:20244","PortSpecifier":{"PortValue":20244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"acbc5458-8e67-482e-a2be-7ec1e3a98537","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acbc5458-8e67-482e-a2be-7ec1e3a98537","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:20244","PortSpecifier":{"PortValue":20244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174547,"nanos":362470648},"http":{"id":"acbc5458-8e67-482e-a2be-7ec1e3a98537","method":"GET","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"acbc5458-8e67-482e-a2be-7ec1e3a98537","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Vs4Cuxpp2DRgOxEs_nkAEP7sWHPVPpeHoTbSYvi0SU3r53n7bUIiHLV3RkGO"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"acbc5458-8e67-482e-a2be-7ec1e3a98537","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Vs4Cuxpp2DRgOxEs_nkAEP7sWHPVPpeHoTbSYvi0SU3r53n7bUIiHLV3RkGO\"}"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"acbc5458-8e67-482e-a2be-7ec1e3a98537","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"acbc5458-8e67-482e-a2be-7ec1e3a98537","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acbc5458-8e67-482e-a2be-7ec1e3a98537","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acbc5458-8e67-482e-a2be-7ec1e3a98537","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acbc5458-8e67-482e-a2be-7ec1e3a98537","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acbc5458-8e67-482e-a2be-7ec1e3a98537","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acbc5458-8e67-482e-a2be-7ec1e3a98537","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b58d177e-318f-42bd-8ace-b3326e7ed2d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:51032","PortSpecifier":{"PortValue":51032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b58d177e-318f-42bd-8ace-b3326e7ed2d0","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b58d177e-318f-42bd-8ace-b3326e7ed2d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:51032","PortSpecifier":{"PortValue":51032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174547,"nanos":367527269},"http":{"id":"b58d177e-318f-42bd-8ace-b3326e7ed2d0","method":"GET","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b58d177e-318f-42bd-8ace-b3326e7ed2d0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Vs4Cuxpp2DRgOxEs_nkAEP7sWHPVPpeHoTbSYvi0SU3r53n7bUIiHLV3RkGO"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b58d177e-318f-42bd-8ace-b3326e7ed2d0","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Vs4Cuxpp2DRgOxEs_nkAEP7sWHPVPpeHoTbSYvi0SU3r53n7bUIiHLV3RkGO\"}"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b58d177e-318f-42bd-8ace-b3326e7ed2d0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b58d177e-318f-42bd-8ace-b3326e7ed2d0","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b58d177e-318f-42bd-8ace-b3326e7ed2d0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b58d177e-318f-42bd-8ace-b3326e7ed2d0","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-1Vs4Cuxpp2DRgOxEs_nkAEP7sWHPVPpeHoTbSYvi0SU3r53n7bUIiHLV3RkGO","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.32","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC04NTU5Y2Q1NzQ0LXZyeGZkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.134.0.42~maas-default-gateway-openshift-default-8559cd5744-vrxfd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.133.0.32","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"b58d177e-318f-42bd-8ace-b3326e7ed2d0"},"host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","id":"b58d177e-318f-42bd-8ace-b3326e7ed2d0","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":367527269,"seconds":1781174547},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.133.0.32:51032","port":51032}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b58d177e-318f-42bd-8ace-b3326e7ed2d0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b58d177e-318f-42bd-8ace-b3326e7ed2d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b58d177e-318f-42bd-8ace-b3326e7ed2d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b58d177e-318f-42bd-8ace-b3326e7ed2d0","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b58d177e-318f-42bd-8ace-b3326e7ed2d0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b58d177e-318f-42bd-8ace-b3326e7ed2d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"c0c3f68f-ddb7-4bc0-a162-1d7078025979","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b58d177e-318f-42bd-8ace-b3326e7ed2d0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b58d177e-318f-42bd-8ace-b3326e7ed2d0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0af68a5-1f5c-44c3-8a9b-783ead11cccf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51208","PortSpecifier":{"PortValue":51208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0af68a5-1f5c-44c3-8a9b-783ead11cccf","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0af68a5-1f5c-44c3-8a9b-783ead11cccf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51208","PortSpecifier":{"PortValue":51208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174547,"nanos":455460431},"http":{"id":"f0af68a5-1f5c-44c3-8a9b-783ead11cccf","method":"POST","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0af68a5-1f5c-44c3-8a9b-783ead11cccf","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174847,"groups":["Engineering","Project-Alpha"],"iat":1781174547,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:9107016c-6760-be18-2c67-31741857285e","preferred_username":"alice_lead","scope":"email profile","sid":"VXjjahhrlkC_nqJZxGA2e-Qu","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0af68a5-1f5c-44c3-8a9b-783ead11cccf","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174847,"groups":["Engineering","Project-Alpha"],"iat":1781174547,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:9107016c-6760-be18-2c67-31741857285e","preferred_username":"alice_lead","scope":"email profile","sid":"VXjjahhrlkC_nqJZxGA2e-Qu","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0af68a5-1f5c-44c3-8a9b-783ead11cccf","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0af68a5-1f5c-44c3-8a9b-783ead11cccf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0af68a5-1f5c-44c3-8a9b-783ead11cccf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0af68a5-1f5c-44c3-8a9b-783ead11cccf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0af68a5-1f5c-44c3-8a9b-783ead11cccf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"526c4604-093d-4578-be96-7348e684cd81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8586","PortSpecifier":{"PortValue":8586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"526c4604-093d-4578-be96-7348e684cd81","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"526c4604-093d-4578-be96-7348e684cd81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8586","PortSpecifier":{"PortValue":8586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174547,"nanos":479940580},"http":{"id":"526c4604-093d-4578-be96-7348e684cd81","method":"GET","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"526c4604-093d-4578-be96-7348e684cd81","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-px0hwXCRwIvHxbQb_cUlZgVOyAN8dLcaHevme2aCK7UI38GRzTNqD4Jlihc"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"526c4604-093d-4578-be96-7348e684cd81","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-px0hwXCRwIvHxbQb_cUlZgVOyAN8dLcaHevme2aCK7UI38GRzTNqD4Jlihc\"}"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"526c4604-093d-4578-be96-7348e684cd81","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"526c4604-093d-4578-be96-7348e684cd81","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526c4604-093d-4578-be96-7348e684cd81","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526c4604-093d-4578-be96-7348e684cd81","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526c4604-093d-4578-be96-7348e684cd81","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"526c4604-093d-4578-be96-7348e684cd81","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"526c4604-093d-4578-be96-7348e684cd81","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"406d1c38-cea6-404e-863d-83aa3abe4d3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:60148","PortSpecifier":{"PortValue":60148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"406d1c38-cea6-404e-863d-83aa3abe4d3a","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"406d1c38-cea6-404e-863d-83aa3abe4d3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:60148","PortSpecifier":{"PortValue":60148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174547,"nanos":501193226},"http":{"id":"406d1c38-cea6-404e-863d-83aa3abe4d3a","method":"GET","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"406d1c38-cea6-404e-863d-83aa3abe4d3a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-px0hwXCRwIvHxbQb_cUlZgVOyAN8dLcaHevme2aCK7UI38GRzTNqD4Jlihc"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"406d1c38-cea6-404e-863d-83aa3abe4d3a","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-px0hwXCRwIvHxbQb_cUlZgVOyAN8dLcaHevme2aCK7UI38GRzTNqD4Jlihc\"}"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"406d1c38-cea6-404e-863d-83aa3abe4d3a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"406d1c38-cea6-404e-863d-83aa3abe4d3a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"406d1c38-cea6-404e-863d-83aa3abe4d3a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"406d1c38-cea6-404e-863d-83aa3abe4d3a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"406d1c38-cea6-404e-863d-83aa3abe4d3a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"406d1c38-cea6-404e-863d-83aa3abe4d3a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"406d1c38-cea6-404e-863d-83aa3abe4d3a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6a763ce-e499-41de-b823-cd2b9f9a042e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:51032","PortSpecifier":{"PortValue":51032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6a763ce-e499-41de-b823-cd2b9f9a042e","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6a763ce-e499-41de-b823-cd2b9f9a042e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:51032","PortSpecifier":{"PortValue":51032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174547,"nanos":506076963},"http":{"id":"c6a763ce-e499-41de-b823-cd2b9f9a042e","method":"GET","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6a763ce-e499-41de-b823-cd2b9f9a042e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-px0hwXCRwIvHxbQb_cUlZgVOyAN8dLcaHevme2aCK7UI38GRzTNqD4Jlihc"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6a763ce-e499-41de-b823-cd2b9f9a042e","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-px0hwXCRwIvHxbQb_cUlZgVOyAN8dLcaHevme2aCK7UI38GRzTNqD4Jlihc\"}"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6a763ce-e499-41de-b823-cd2b9f9a042e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6a763ce-e499-41de-b823-cd2b9f9a042e","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6a763ce-e499-41de-b823-cd2b9f9a042e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6a763ce-e499-41de-b823-cd2b9f9a042e","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-px0hwXCRwIvHxbQb_cUlZgVOyAN8dLcaHevme2aCK7UI38GRzTNqD4Jlihc","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.32","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC04NTU5Y2Q1NzQ0LXZyeGZkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.134.0.42~maas-default-gateway-openshift-default-8559cd5744-vrxfd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.133.0.32","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"c6a763ce-e499-41de-b823-cd2b9f9a042e"},"host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","id":"c6a763ce-e499-41de-b823-cd2b9f9a042e","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":506076963,"seconds":1781174547},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.133.0.32:51032","port":51032}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6a763ce-e499-41de-b823-cd2b9f9a042e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6a763ce-e499-41de-b823-cd2b9f9a042e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6a763ce-e499-41de-b823-cd2b9f9a042e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6a763ce-e499-41de-b823-cd2b9f9a042e","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6a763ce-e499-41de-b823-cd2b9f9a042e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6a763ce-e499-41de-b823-cd2b9f9a042e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"b0cbc98f-8a5c-43a9-b08a-8423a7e852a0","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6a763ce-e499-41de-b823-cd2b9f9a042e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6a763ce-e499-41de-b823-cd2b9f9a042e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02bd3359-48c0-41ce-a684-4529ebd09580","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51344","PortSpecifier":{"PortValue":51344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02bd3359-48c0-41ce-a684-4529ebd09580","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02bd3359-48c0-41ce-a684-4529ebd09580","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51344","PortSpecifier":{"PortValue":51344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174547,"nanos":598255905},"http":{"id":"02bd3359-48c0-41ce-a684-4529ebd09580","method":"POST","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02bd3359-48c0-41ce-a684-4529ebd09580","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174847,"groups":["Engineering","Project-Alpha"],"iat":1781174547,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ab2a00b4-0d41-d1cd-1eef-ebe31591de29","preferred_username":"alice_lead","scope":"email profile","sid":"xGZXnY_cCRDhez-fWRa4xYkt","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02bd3359-48c0-41ce-a684-4529ebd09580","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174847,"groups":["Engineering","Project-Alpha"],"iat":1781174547,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ab2a00b4-0d41-d1cd-1eef-ebe31591de29","preferred_username":"alice_lead","scope":"email profile","sid":"xGZXnY_cCRDhez-fWRa4xYkt","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02bd3359-48c0-41ce-a684-4529ebd09580","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02bd3359-48c0-41ce-a684-4529ebd09580","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02bd3359-48c0-41ce-a684-4529ebd09580","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02bd3359-48c0-41ce-a684-4529ebd09580","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02bd3359-48c0-41ce-a684-4529ebd09580","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c67793e-5f5b-440d-a5c9-d58b3cf0ac40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51224","PortSpecifier":{"PortValue":51224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c67793e-5f5b-440d-a5c9-d58b3cf0ac40","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c67793e-5f5b-440d-a5c9-d58b3cf0ac40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51224","PortSpecifier":{"PortValue":51224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174547,"nanos":622627696},"http":{"id":"6c67793e-5f5b-440d-a5c9-d58b3cf0ac40","method":"GET","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c67793e-5f5b-440d-a5c9-d58b3cf0ac40","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-13Y9PNvQp8xMp9PCl_7eQ9d38BfGdyHMgBLfy8igS2Ui7rCcQRLNIl8uNRvsE"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6c67793e-5f5b-440d-a5c9-d58b3cf0ac40","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-13Y9PNvQp8xMp9PCl_7eQ9d38BfGdyHMgBLfy8igS2Ui7rCcQRLNIl8uNRvsE\"}"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6c67793e-5f5b-440d-a5c9-d58b3cf0ac40","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c67793e-5f5b-440d-a5c9-d58b3cf0ac40","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c67793e-5f5b-440d-a5c9-d58b3cf0ac40","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c67793e-5f5b-440d-a5c9-d58b3cf0ac40","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c67793e-5f5b-440d-a5c9-d58b3cf0ac40","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c67793e-5f5b-440d-a5c9-d58b3cf0ac40","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c67793e-5f5b-440d-a5c9-d58b3cf0ac40","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b64afa6a-9c23-4524-8c13-9cb6055aa9b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:51032","PortSpecifier":{"PortValue":51032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b64afa6a-9c23-4524-8c13-9cb6055aa9b0","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b64afa6a-9c23-4524-8c13-9cb6055aa9b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:51032","PortSpecifier":{"PortValue":51032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174547,"nanos":628177105},"http":{"id":"b64afa6a-9c23-4524-8c13-9cb6055aa9b0","method":"GET","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b64afa6a-9c23-4524-8c13-9cb6055aa9b0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-13Y9PNvQp8xMp9PCl_7eQ9d38BfGdyHMgBLfy8igS2Ui7rCcQRLNIl8uNRvsE"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b64afa6a-9c23-4524-8c13-9cb6055aa9b0","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-13Y9PNvQp8xMp9PCl_7eQ9d38BfGdyHMgBLfy8igS2Ui7rCcQRLNIl8uNRvsE\"}"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b64afa6a-9c23-4524-8c13-9cb6055aa9b0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b64afa6a-9c23-4524-8c13-9cb6055aa9b0","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b64afa6a-9c23-4524-8c13-9cb6055aa9b0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b64afa6a-9c23-4524-8c13-9cb6055aa9b0","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-13Y9PNvQp8xMp9PCl_7eQ9d38BfGdyHMgBLfy8igS2Ui7rCcQRLNIl8uNRvsE","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.32","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.42~maas-default-gateway-openshift-default-8559cd5744-vrxfd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.133.0.32","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"b64afa6a-9c23-4524-8c13-9cb6055aa9b0"},"host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","id":"b64afa6a-9c23-4524-8c13-9cb6055aa9b0","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":628177105,"seconds":1781174547},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.133.0.32:51032","port":51032}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b64afa6a-9c23-4524-8c13-9cb6055aa9b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b64afa6a-9c23-4524-8c13-9cb6055aa9b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b64afa6a-9c23-4524-8c13-9cb6055aa9b0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b64afa6a-9c23-4524-8c13-9cb6055aa9b0","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b64afa6a-9c23-4524-8c13-9cb6055aa9b0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b64afa6a-9c23-4524-8c13-9cb6055aa9b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"b08aafb3-8825-4bd2-b5e6-e6ba97498f2f","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b64afa6a-9c23-4524-8c13-9cb6055aa9b0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b64afa6a-9c23-4524-8c13-9cb6055aa9b0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2d337c1-e509-4644-a188-039436a3e750","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8588","PortSpecifier":{"PortValue":8588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2d337c1-e509-4644-a188-039436a3e750","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2d337c1-e509-4644-a188-039436a3e750","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:8588","PortSpecifier":{"PortValue":8588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174547,"nanos":655252970},"http":{"id":"c2d337c1-e509-4644-a188-039436a3e750","method":"GET","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2d337c1-e509-4644-a188-039436a3e750","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-13Y9PNvQp8xMp9PCl_7eQ9d38BfGdyHMgBLfy8igS2Ui7rCcQRLNIl8uNRvsE"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c2d337c1-e509-4644-a188-039436a3e750","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-13Y9PNvQp8xMp9PCl_7eQ9d38BfGdyHMgBLfy8igS2Ui7rCcQRLNIl8uNRvsE\"}"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c2d337c1-e509-4644-a188-039436a3e750","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2d337c1-e509-4644-a188-039436a3e750","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2d337c1-e509-4644-a188-039436a3e750","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2d337c1-e509-4644-a188-039436a3e750","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2d337c1-e509-4644-a188-039436a3e750","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2d337c1-e509-4644-a188-039436a3e750","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2d337c1-e509-4644-a188-039436a3e750","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa674313-1c2f-49df-9b0b-52a8e3e9ecff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:51032","PortSpecifier":{"PortValue":51032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa674313-1c2f-49df-9b0b-52a8e3e9ecff","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa674313-1c2f-49df-9b0b-52a8e3e9ecff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:51032","PortSpecifier":{"PortValue":51032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174547,"nanos":659849800},"http":{"id":"aa674313-1c2f-49df-9b0b-52a8e3e9ecff","method":"GET","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa674313-1c2f-49df-9b0b-52a8e3e9ecff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-13Y9PNvQp8xMp9PCl_7eQ9d38BfGdyHMgBLfy8igS2Ui7rCcQRLNIl8uNRvsE"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aa674313-1c2f-49df-9b0b-52a8e3e9ecff","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-13Y9PNvQp8xMp9PCl_7eQ9d38BfGdyHMgBLfy8igS2Ui7rCcQRLNIl8uNRvsE\"}"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aa674313-1c2f-49df-9b0b-52a8e3e9ecff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aa674313-1c2f-49df-9b0b-52a8e3e9ecff","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aa674313-1c2f-49df-9b0b-52a8e3e9ecff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa674313-1c2f-49df-9b0b-52a8e3e9ecff","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-13Y9PNvQp8xMp9PCl_7eQ9d38BfGdyHMgBLfy8igS2Ui7rCcQRLNIl8uNRvsE","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.32","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC04NTU5Y2Q1NzQ0LXZyeGZkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.134.0.42~maas-default-gateway-openshift-default-8559cd5744-vrxfd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.133.0.32","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"aa674313-1c2f-49df-9b0b-52a8e3e9ecff"},"host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","id":"aa674313-1c2f-49df-9b0b-52a8e3e9ecff","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":659849800,"seconds":1781174547},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.133.0.32:51032","port":51032}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa674313-1c2f-49df-9b0b-52a8e3e9ecff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa674313-1c2f-49df-9b0b-52a8e3e9ecff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa674313-1c2f-49df-9b0b-52a8e3e9ecff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa674313-1c2f-49df-9b0b-52a8e3e9ecff","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa674313-1c2f-49df-9b0b-52a8e3e9ecff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa674313-1c2f-49df-9b0b-52a8e3e9ecff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"b08aafb3-8825-4bd2-b5e6-e6ba97498f2f","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa674313-1c2f-49df-9b0b-52a8e3e9ecff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa674313-1c2f-49df-9b0b-52a8e3e9ecff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"770b27b2-cab2-455b-9131-09d0de1dd538","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:60152","PortSpecifier":{"PortValue":60152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"770b27b2-cab2-455b-9131-09d0de1dd538","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"770b27b2-cab2-455b-9131-09d0de1dd538","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:60152","PortSpecifier":{"PortValue":60152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781174547,"nanos":747423268},"http":{"id":"770b27b2-cab2-455b-9131-09d0de1dd538","method":"POST","headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"770b27b2-cab2-455b-9131-09d0de1dd538","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174847,"groups":["Engineering","Project-Alpha"],"iat":1781174547,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:4e5c9f45-b0c8-9b77-cacb-3a836f565aa0","preferred_username":"alice_lead","scope":"email profile","sid":"HTn-lsEdK0tYGkvEGJjHJcNY","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"770b27b2-cab2-455b-9131-09d0de1dd538","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781174847,"groups":["Engineering","Project-Alpha"],"iat":1781174547,"iss":"https://keycloak.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:4e5c9f45-b0c8-9b77-cacb-3a836f565aa0","preferred_username":"alice_lead","scope":"email profile","sid":"HTn-lsEdK0tYGkvEGJjHJcNY","sub":"e462311c-b759-4366-aecd-37393bd5ecec","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2d25cf6a-7055-4da5-8978-3dae96723d8c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"770b27b2-cab2-455b-9131-09d0de1dd538","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"770b27b2-cab2-455b-9131-09d0de1dd538","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"770b27b2-cab2-455b-9131-09d0de1dd538","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"770b27b2-cab2-455b-9131-09d0de1dd538","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-11T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"770b27b2-cab2-455b-9131-09d0de1dd538","authorized":true,"response":"OK"}