--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"error","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"def42b4d-256d-4660-a54a-390bb5e7d484","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:2728","PortSpecifier":{"PortValue":2728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"def42b4d-256d-4660-a54a-390bb5e7d484","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"def42b4d-256d-4660-a54a-390bb5e7d484","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:2728","PortSpecifier":{"PortValue":2728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776783897,"nanos":311296560},"http":{"id":"def42b4d-256d-4660-a54a-390bb5e7d484","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"def42b4d-256d-4660-a54a-390bb5e7d484","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"def42b4d-256d-4660-a54a-390bb5e7d484","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"def42b4d-256d-4660-a54a-390bb5e7d484","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:e2e-sa-multi-subs-no-header","uid":"fff7c93e-3d1a-4029-a7be-b183c4f63c5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f0677932-e256-4218-a756-8556cd071f7f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f491fcdd8f84"]}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"def42b4d-256d-4660-a54a-390bb5e7d484","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f491fcdd8f84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f0677932-e256-4218-a756-8556cd071f7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fff7c93e-3d1a-4029-a7be-b183c4f63c5f","username":"system:serviceaccount:default:e2e-sa-multi-subs-no-header"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"def42b4d-256d-4660-a54a-390bb5e7d484","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:e2e-sa-multi-subs-no-header"} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"def42b4d-256d-4660-a54a-390bb5e7d484","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"def42b4d-256d-4660-a54a-390bb5e7d484","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":"system:serviceaccount:default:e2e-sa-multi-subs-no-header"} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"def42b4d-256d-4660-a54a-390bb5e7d484","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":"[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"def42b4d-256d-4660-a54a-390bb5e7d484","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"def42b4d-256d-4660-a54a-390bb5e7d484","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4224d975-3116-4600-b84c-243e8d1c935e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:51190","PortSpecifier":{"PortValue":51190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4224d975-3116-4600-b84c-243e8d1c935e","method":"GET","path":"/llm/e2e-distinct-simulated/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4224d975-3116-4600-b84c-243e8d1c935e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:51190","PortSpecifier":{"PortValue":51190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776783897,"nanos":329318026},"http":{"id":"4224d975-3116-4600-b84c-243e8d1c935e","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-distinct-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4224d975-3116-4600-b84c-243e8d1c935e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4224d975-3116-4600-b84c-243e8d1c935e","config":{"Name":"kubernetes-tokens","Priority":1,"Conditions":{"Left":{"Selector":"request.url_path","Operator":5,"Value":".*/v1/models$"},"Right":{"Left":{"Selector":"request.headers.authorization","Operator":2,"Value":""},"Right":{"Left":null,"Right":null}}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:e2e-sa-multi-subs-no-header","uid":"fff7c93e-3d1a-4029-a7be-b183c4f63c5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f0677932-e256-4218-a756-8556cd071f7f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f491fcdd8f84"]}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4224d975-3116-4600-b84c-243e8d1c935e","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-distinct-simulated\",\"requestedSubscription\":\"e2e-sa-multi-no-hdr-sub1\",\"username\":\"system:serviceaccount:default:e2e-sa-multi-subs-no-header\"}"} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4224d975-3116-4600-b84c-243e8d1c935e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-distinct-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-sa-multi-no-hdr-sub1","namespace":"models-as-a-service","phase":"Active","ready":true}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4224d975-3116-4600-b84c-243e8d1c935e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f491fcdd8f84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f0677932-e256-4218-a756-8556cd071f7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fff7c93e-3d1a-4029-a7be-b183c4f63c5f","username":"system:serviceaccount:default:e2e-sa-multi-subs-no-header"}},"metadata":{"subscription-info":{"modelRefs":[{"name":"e2e-distinct-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-sa-multi-no-hdr-sub1","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-distinct-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"e2e-distinct-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.36~maas-default-gateway-openshift-default-58b6f876-vbvzt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-maas-subscription":"e2e-sa-multi-no-hdr-sub1","x-request-id":"4224d975-3116-4600-b84c-243e8d1c935e"},"host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","id":"4224d975-3116-4600-b84c-243e8d1c935e","method":"GET","path":"/llm/e2e-distinct-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":329318026,"seconds":1776783897},"url_path":"/llm/e2e-distinct-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"100.64.0.4:51190","port":51190}}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4224d975-3116-4600-b84c-243e8d1c935e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4224d975-3116-4600-b84c-243e8d1c935e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4224d975-3116-4600-b84c-243e8d1c935e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4224d975-3116-4600-b84c-243e8d1c935e","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4224d975-3116-4600-b84c-243e8d1c935e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"reason":"no such key: apiKeyValidation"} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4224d975-3116-4600-b84c-243e8d1c935e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":""} {"level":"info","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4224d975-3116-4600-b84c-243e8d1c935e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4224d975-3116-4600-b84c-243e8d1c935e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff2aa7af-ab76-4837-af1b-6c085fbeb7b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:51190","PortSpecifier":{"PortValue":51190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff2aa7af-ab76-4837-af1b-6c085fbeb7b0","method":"GET","path":"/llm/e2e-distinct-2-simulated/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff2aa7af-ab76-4837-af1b-6c085fbeb7b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:51190","PortSpecifier":{"PortValue":51190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776783897,"nanos":347108395},"http":{"id":"ff2aa7af-ab76-4837-af1b-6c085fbeb7b0","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-distinct-2-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ff2aa7af-ab76-4837-af1b-6c085fbeb7b0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff2aa7af-ab76-4837-af1b-6c085fbeb7b0","config":{"Name":"kubernetes-tokens","Priority":1,"Conditions":{"Left":{"Selector":"request.url_path","Operator":5,"Value":".*/v1/models$"},"Right":{"Left":{"Selector":"request.headers.authorization","Operator":2,"Value":""},"Right":{"Left":null,"Right":null}}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:e2e-sa-multi-subs-no-header","uid":"fff7c93e-3d1a-4029-a7be-b183c4f63c5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f0677932-e256-4218-a756-8556cd071f7f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f491fcdd8f84"]}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff2aa7af-ab76-4837-af1b-6c085fbeb7b0","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-distinct-2-simulated\",\"requestedSubscription\":\"e2e-sa-multi-no-hdr-sub2\",\"username\":\"system:serviceaccount:default:e2e-sa-multi-subs-no-header\"}"} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff2aa7af-ab76-4837-af1b-6c085fbeb7b0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-distinct-2-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-sa-multi-no-hdr-sub2","namespace":"models-as-a-service","phase":"Active","ready":true}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff2aa7af-ab76-4837-af1b-6c085fbeb7b0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f491fcdd8f84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f0677932-e256-4218-a756-8556cd071f7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fff7c93e-3d1a-4029-a7be-b183c4f63c5f","username":"system:serviceaccount:default:e2e-sa-multi-subs-no-header"}},"metadata":{"subscription-info":{"modelRefs":[{"name":"e2e-distinct-2-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-sa-multi-no-hdr-sub2","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-distinct-2-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"e2e-distinct-2-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.36~maas-default-gateway-openshift-default-58b6f876-vbvzt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-maas-subscription":"e2e-sa-multi-no-hdr-sub2","x-request-id":"ff2aa7af-ab76-4837-af1b-6c085fbeb7b0"},"host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","id":"ff2aa7af-ab76-4837-af1b-6c085fbeb7b0","method":"GET","path":"/llm/e2e-distinct-2-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":347108395,"seconds":1776783897},"url_path":"/llm/e2e-distinct-2-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"100.64.0.4:51190","port":51190}}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff2aa7af-ab76-4837-af1b-6c085fbeb7b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff2aa7af-ab76-4837-af1b-6c085fbeb7b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := []\nallowed_users := [\"system:serviceaccount:default:e2e-sa-multi-subs-no-header\"]\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff2aa7af-ab76-4837-af1b-6c085fbeb7b0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff2aa7af-ab76-4837-af1b-6c085fbeb7b0","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff2aa7af-ab76-4837-af1b-6c085fbeb7b0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":""} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff2aa7af-ab76-4837-af1b-6c085fbeb7b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: apiKeyValidation"} {"level":"info","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff2aa7af-ab76-4837-af1b-6c085fbeb7b0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff2aa7af-ab76-4837-af1b-6c085fbeb7b0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca1187da-4545-4fe2-9523-b6d0cf104b54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:51190","PortSpecifier":{"PortValue":51190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca1187da-4545-4fe2-9523-b6d0cf104b54","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca1187da-4545-4fe2-9523-b6d0cf104b54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:51190","PortSpecifier":{"PortValue":51190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776783897,"nanos":361155484},"http":{"id":"ca1187da-4545-4fe2-9523-b6d0cf104b54","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ca1187da-4545-4fe2-9523-b6d0cf104b54","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca1187da-4545-4fe2-9523-b6d0cf104b54","config":{"Name":"kubernetes-tokens","Priority":1,"Conditions":{"Left":{"Selector":"request.url_path","Operator":5,"Value":".*/v1/models$"},"Right":{"Left":{"Selector":"request.headers.authorization","Operator":2,"Value":""},"Right":{"Left":null,"Right":null}}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:e2e-sa-multi-subs-no-header","uid":"fff7c93e-3d1a-4029-a7be-b183c4f63c5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f0677932-e256-4218-a756-8556cd071f7f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f491fcdd8f84"]}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca1187da-4545-4fe2-9523-b6d0cf104b54","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:e2e-sa-multi-subs-no-header\"}"} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca1187da-4545-4fe2-9523-b6d0cf104b54","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca1187da-4545-4fe2-9523-b6d0cf104b54","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f491fcdd8f84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f0677932-e256-4218-a756-8556cd071f7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fff7c93e-3d1a-4029-a7be-b183c4f63c5f","username":"system:serviceaccount:default:e2e-sa-multi-subs-no-header"}},"metadata":{"subscription-info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.36~maas-default-gateway-openshift-default-58b6f876-vbvzt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"ca1187da-4545-4fe2-9523-b6d0cf104b54"},"host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","id":"ca1187da-4545-4fe2-9523-b6d0cf104b54","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":361155484,"seconds":1776783897},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"100.64.0.4:51190","port":51190}}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca1187da-4545-4fe2-9523-b6d0cf104b54","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca1187da-4545-4fe2-9523-b6d0cf104b54","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca1187da-4545-4fe2-9523-b6d0cf104b54","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca1187da-4545-4fe2-9523-b6d0cf104b54","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca1187da-4545-4fe2-9523-b6d0cf104b54","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":""} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ca1187da-4545-4fe2-9523-b6d0cf104b54","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"reason":"no such key: apiKeyValidation"} {"level":"info","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca1187da-4545-4fe2-9523-b6d0cf104b54","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:04:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca1187da-4545-4fe2-9523-b6d0cf104b54","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"error","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"debug","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"debug","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"debug","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"debug","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92aa39dc-d014-4bff-b853-48044874e7ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:61352","PortSpecifier":{"PortValue":61352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92aa39dc-d014-4bff-b853-48044874e7ec","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92aa39dc-d014-4bff-b853-48044874e7ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:61352","PortSpecifier":{"PortValue":61352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776783913,"nanos":858726913},"http":{"id":"92aa39dc-d014-4bff-b853-48044874e7ec","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"92aa39dc-d014-4bff-b853-48044874e7ec","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"92aa39dc-d014-4bff-b853-48044874e7ec","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92aa39dc-d014-4bff-b853-48044874e7ec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:e2e-sa-multi-subs-with-header","uid":"9806533b-3ea7-440d-897f-11daeb475e76","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d10b218-f142-4c02-8d27-8344004c83b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f491fcdd8f84"]}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92aa39dc-d014-4bff-b853-48044874e7ec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f491fcdd8f84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d10b218-f142-4c02-8d27-8344004c83b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9806533b-3ea7-440d-897f-11daeb475e76","username":"system:serviceaccount:default:e2e-sa-multi-subs-with-header"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92aa39dc-d014-4bff-b853-48044874e7ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:e2e-sa-multi-subs-with-header"} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92aa39dc-d014-4bff-b853-48044874e7ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92aa39dc-d014-4bff-b853-48044874e7ec","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":"[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92aa39dc-d014-4bff-b853-48044874e7ec","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":"system:serviceaccount:default:e2e-sa-multi-subs-with-header"} {"level":"info","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92aa39dc-d014-4bff-b853-48044874e7ec","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92aa39dc-d014-4bff-b853-48044874e7ec","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23792ed7-2ca3-4b2a-b976-eabd7a1db75f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:51190","PortSpecifier":{"PortValue":51190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23792ed7-2ca3-4b2a-b976-eabd7a1db75f","method":"GET","path":"/llm/e2e-distinct-simulated/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23792ed7-2ca3-4b2a-b976-eabd7a1db75f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:51190","PortSpecifier":{"PortValue":51190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776783913,"nanos":876796054},"http":{"id":"23792ed7-2ca3-4b2a-b976-eabd7a1db75f","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-distinct-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"23792ed7-2ca3-4b2a-b976-eabd7a1db75f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23792ed7-2ca3-4b2a-b976-eabd7a1db75f","config":{"Name":"kubernetes-tokens","Priority":1,"Conditions":{"Left":{"Selector":"request.url_path","Operator":5,"Value":".*/v1/models$"},"Right":{"Left":{"Selector":"request.headers.authorization","Operator":2,"Value":""},"Right":{"Left":null,"Right":null}}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:e2e-sa-multi-subs-with-header","uid":"9806533b-3ea7-440d-897f-11daeb475e76","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d10b218-f142-4c02-8d27-8344004c83b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f491fcdd8f84"]}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"23792ed7-2ca3-4b2a-b976-eabd7a1db75f","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-distinct-simulated\",\"requestedSubscription\":\"e2e-sa-multi-hdr-sub1\",\"username\":\"system:serviceaccount:default:e2e-sa-multi-subs-with-header\"}"} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"23792ed7-2ca3-4b2a-b976-eabd7a1db75f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-distinct-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-sa-multi-hdr-sub1","namespace":"models-as-a-service","phase":"Active","ready":true}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23792ed7-2ca3-4b2a-b976-eabd7a1db75f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f491fcdd8f84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d10b218-f142-4c02-8d27-8344004c83b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9806533b-3ea7-440d-897f-11daeb475e76","username":"system:serviceaccount:default:e2e-sa-multi-subs-with-header"}},"metadata":{"subscription-info":{"modelRefs":[{"name":"e2e-distinct-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-sa-multi-hdr-sub1","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-distinct-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"e2e-distinct-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.36~maas-default-gateway-openshift-default-58b6f876-vbvzt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-maas-subscription":"e2e-sa-multi-hdr-sub1","x-request-id":"23792ed7-2ca3-4b2a-b976-eabd7a1db75f"},"host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","id":"23792ed7-2ca3-4b2a-b976-eabd7a1db75f","method":"GET","path":"/llm/e2e-distinct-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":876796054,"seconds":1776783913},"url_path":"/llm/e2e-distinct-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"100.64.0.4:51190","port":51190}}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23792ed7-2ca3-4b2a-b976-eabd7a1db75f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23792ed7-2ca3-4b2a-b976-eabd7a1db75f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23792ed7-2ca3-4b2a-b976-eabd7a1db75f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := []\nallowed_users := [\"system:serviceaccount:default:e2e-sa-multi-subs-with-header\"]\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23792ed7-2ca3-4b2a-b976-eabd7a1db75f","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23792ed7-2ca3-4b2a-b976-eabd7a1db75f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":""} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"23792ed7-2ca3-4b2a-b976-eabd7a1db75f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}}]},"Plain":null},"reason":"no such key: apiKeyValidation"} {"level":"info","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23792ed7-2ca3-4b2a-b976-eabd7a1db75f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23792ed7-2ca3-4b2a-b976-eabd7a1db75f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b22c2d02-376b-4456-aa28-b7c9f6a94092","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:30004","PortSpecifier":{"PortValue":30004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b22c2d02-376b-4456-aa28-b7c9f6a94092","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b22c2d02-376b-4456-aa28-b7c9f6a94092","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:30004","PortSpecifier":{"PortValue":30004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776783913,"nanos":907725020},"http":{"id":"b22c2d02-376b-4456-aa28-b7c9f6a94092","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"b22c2d02-376b-4456-aa28-b7c9f6a94092","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b22c2d02-376b-4456-aa28-b7c9f6a94092","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b22c2d02-376b-4456-aa28-b7c9f6a94092","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:e2e-sa-multi-subs-with-header","uid":"9806533b-3ea7-440d-897f-11daeb475e76","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d10b218-f142-4c02-8d27-8344004c83b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f491fcdd8f84"]}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b22c2d02-376b-4456-aa28-b7c9f6a94092","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f491fcdd8f84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d10b218-f142-4c02-8d27-8344004c83b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9806533b-3ea7-440d-897f-11daeb475e76","username":"system:serviceaccount:default:e2e-sa-multi-subs-with-header"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b22c2d02-376b-4456-aa28-b7c9f6a94092","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:e2e-sa-multi-subs-with-header"} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b22c2d02-376b-4456-aa28-b7c9f6a94092","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b22c2d02-376b-4456-aa28-b7c9f6a94092","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":"system:serviceaccount:default:e2e-sa-multi-subs-with-header"} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b22c2d02-376b-4456-aa28-b7c9f6a94092","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":"[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b22c2d02-376b-4456-aa28-b7c9f6a94092","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b22c2d02-376b-4456-aa28-b7c9f6a94092","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be01b2d4-00ea-4cb0-a22b-28c491a6d8a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:51190","PortSpecifier":{"PortValue":51190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be01b2d4-00ea-4cb0-a22b-28c491a6d8a5","method":"GET","path":"/llm/e2e-distinct-2-simulated/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be01b2d4-00ea-4cb0-a22b-28c491a6d8a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:51190","PortSpecifier":{"PortValue":51190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776783913,"nanos":921002362},"http":{"id":"be01b2d4-00ea-4cb0-a22b-28c491a6d8a5","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-distinct-2-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"be01b2d4-00ea-4cb0-a22b-28c491a6d8a5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be01b2d4-00ea-4cb0-a22b-28c491a6d8a5","config":{"Name":"kubernetes-tokens","Priority":1,"Conditions":{"Left":{"Selector":"request.url_path","Operator":5,"Value":".*/v1/models$"},"Right":{"Left":{"Selector":"request.headers.authorization","Operator":2,"Value":""},"Right":{"Left":null,"Right":null}}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:e2e-sa-multi-subs-with-header","uid":"9806533b-3ea7-440d-897f-11daeb475e76","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d10b218-f142-4c02-8d27-8344004c83b0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f491fcdd8f84"]}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be01b2d4-00ea-4cb0-a22b-28c491a6d8a5","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-distinct-2-simulated\",\"requestedSubscription\":\"e2e-sa-multi-hdr-sub2\",\"username\":\"system:serviceaccount:default:e2e-sa-multi-subs-with-header\"}"} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be01b2d4-00ea-4cb0-a22b-28c491a6d8a5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-distinct-2-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-sa-multi-hdr-sub2","namespace":"models-as-a-service","phase":"Active","ready":true}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be01b2d4-00ea-4cb0-a22b-28c491a6d8a5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f491fcdd8f84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d10b218-f142-4c02-8d27-8344004c83b0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9806533b-3ea7-440d-897f-11daeb475e76","username":"system:serviceaccount:default:e2e-sa-multi-subs-with-header"}},"metadata":{"subscription-info":{"modelRefs":[{"name":"e2e-distinct-2-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-sa-multi-hdr-sub2","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-distinct-2-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"e2e-distinct-2-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.36~maas-default-gateway-openshift-default-58b6f876-vbvzt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-maas-subscription":"e2e-sa-multi-hdr-sub2","x-request-id":"be01b2d4-00ea-4cb0-a22b-28c491a6d8a5"},"host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","id":"be01b2d4-00ea-4cb0-a22b-28c491a6d8a5","method":"GET","path":"/llm/e2e-distinct-2-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":921002362,"seconds":1776783913},"url_path":"/llm/e2e-distinct-2-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"100.64.0.4:51190","port":51190}}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be01b2d4-00ea-4cb0-a22b-28c491a6d8a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := []\nallowed_users := [\"system:serviceaccount:default:e2e-sa-multi-subs-with-header\"]\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be01b2d4-00ea-4cb0-a22b-28c491a6d8a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be01b2d4-00ea-4cb0-a22b-28c491a6d8a5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be01b2d4-00ea-4cb0-a22b-28c491a6d8a5","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be01b2d4-00ea-4cb0-a22b-28c491a6d8a5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":""} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be01b2d4-00ea-4cb0-a22b-28c491a6d8a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"reason":"no such key: apiKeyValidation"} {"level":"info","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be01b2d4-00ea-4cb0-a22b-28c491a6d8a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be01b2d4-00ea-4cb0-a22b-28c491a6d8a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"error","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"info","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"debug","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"584f6a89-b323-46cc-91d4-46cf0868ebae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:35546","PortSpecifier":{"PortValue":35546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"584f6a89-b323-46cc-91d4-46cf0868ebae","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:05:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"584f6a89-b323-46cc-91d4-46cf0868ebae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:35546","PortSpecifier":{"PortValue":35546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776783922,"nanos":977857388},"http":{"id":"584f6a89-b323-46cc-91d4-46cf0868ebae","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.36~maas-default-gateway-openshift-default-58b6f876-vbvzt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-request-id":"584f6a89-b323-46cc-91d4-46cf0868ebae"},"path":"/maas-api/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"metadata_context":{}}} {"level":"info","ts":"2026-04-21T15:05:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"584f6a89-b323-46cc-91d4-46cf0868ebae","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}"}} {"level":"debug","ts":"2026-04-21T15:05:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"584f6a89-b323-46cc-91d4-46cf0868ebae","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}} {"level":"debug","ts":"2026-04-21T15:05:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437"} {"level":"info","ts":"2026-04-21T15:05:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437"} {"level":"debug","ts":"2026-04-21T15:05:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437"} {"level":"info","ts":"2026-04-21T15:05:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T14:49:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T14:49:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T14:48:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T14:48:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"debug","ts":"2026-04-21T15:05:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c53c21c2-e7f2-463f-aae7-e5651a3dd691","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:55034","PortSpecifier":{"PortValue":55034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c53c21c2-e7f2-463f-aae7-e5651a3dd691","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c53c21c2-e7f2-463f-aae7-e5651a3dd691","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:55034","PortSpecifier":{"PortValue":55034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776783939,"nanos":612654416},"http":{"id":"c53c21c2-e7f2-463f-aae7-e5651a3dd691","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c53c21c2-e7f2-463f-aae7-e5651a3dd691","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c53c21c2-e7f2-463f-aae7-e5651a3dd691","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c53c21c2-e7f2-463f-aae7-e5651a3dd691","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b73dfb9-9553-4985-b028-a73634777172","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7bf3965a-ceaf-49fd-ac09-6a56b764b517"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f491fcdd8f84"]}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c53c21c2-e7f2-463f-aae7-e5651a3dd691","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f491fcdd8f84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7bf3965a-ceaf-49fd-ac09-6a56b764b517"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b73dfb9-9553-4985-b028-a73634777172","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c53c21c2-e7f2-463f-aae7-e5651a3dd691","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c53c21c2-e7f2-463f-aae7-e5651a3dd691","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c53c21c2-e7f2-463f-aae7-e5651a3dd691","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":"[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c53c21c2-e7f2-463f-aae7-e5651a3dd691","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c53c21c2-e7f2-463f-aae7-e5651a3dd691","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c53c21c2-e7f2-463f-aae7-e5651a3dd691","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f6d6d2f-923d-45c6-bbfc-982f4be4f1d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:14608","PortSpecifier":{"PortValue":14608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f6d6d2f-923d-45c6-bbfc-982f4be4f1d5","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f6d6d2f-923d-45c6-bbfc-982f4be4f1d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:14608","PortSpecifier":{"PortValue":14608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776783939,"nanos":651541700},"http":{"id":"3f6d6d2f-923d-45c6-bbfc-982f4be4f1d5","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f6d6d2f-923d-45c6-bbfc-982f4be4f1d5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SXpk3RDLf6sUEYzd_RmJ17K9iBxoFu3FDfbtpSys8pMJL9SXfncJ2vSrr4IX"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f6d6d2f-923d-45c6-bbfc-982f4be4f1d5","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SXpk3RDLf6sUEYzd_RmJ17K9iBxoFu3FDfbtpSys8pMJL9SXfncJ2vSrr4IX\"}"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f6d6d2f-923d-45c6-bbfc-982f4be4f1d5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f6d6d2f-923d-45c6-bbfc-982f4be4f1d5","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-central-models-exempt-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f6d6d2f-923d-45c6-bbfc-982f4be4f1d5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-unconfigured-facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f6d6d2f-923d-45c6-bbfc-982f4be4f1d5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f6d6d2f-923d-45c6-bbfc-982f4be4f1d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f6d6d2f-923d-45c6-bbfc-982f4be4f1d5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f6d6d2f-923d-45c6-bbfc-982f4be4f1d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f6d6d2f-923d-45c6-bbfc-982f4be4f1d5","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f6d6d2f-923d-45c6-bbfc-982f4be4f1d5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f6d6d2f-923d-45c6-bbfc-982f4be4f1d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d7410ce0-5eb4-4cb5-8cbc-87af27b23412","selected_subscription":"e2e-central-models-exempt-sub","selected_subscription_key":"models-as-a-service/e2e-central-models-exempt-sub@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"e2e-unconfigured-facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f6d6d2f-923d-45c6-bbfc-982f4be4f1d5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f6d6d2f-923d-45c6-bbfc-982f4be4f1d5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6fb5a3e-be69-4100-8051-dedbcbed187e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:62004","PortSpecifier":{"PortValue":62004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6fb5a3e-be69-4100-8051-dedbcbed187e","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6fb5a3e-be69-4100-8051-dedbcbed187e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:62004","PortSpecifier":{"PortValue":62004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776783939,"nanos":679814288},"http":{"id":"e6fb5a3e-be69-4100-8051-dedbcbed187e","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6fb5a3e-be69-4100-8051-dedbcbed187e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SXpk3RDLf6sUEYzd_RmJ17K9iBxoFu3FDfbtpSys8pMJL9SXfncJ2vSrr4IX"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e6fb5a3e-be69-4100-8051-dedbcbed187e","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SXpk3RDLf6sUEYzd_RmJ17K9iBxoFu3FDfbtpSys8pMJL9SXfncJ2vSrr4IX\"}"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e6fb5a3e-be69-4100-8051-dedbcbed187e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e6fb5a3e-be69-4100-8051-dedbcbed187e","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-central-models-exempt-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e6fb5a3e-be69-4100-8051-dedbcbed187e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-unconfigured-facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6fb5a3e-be69-4100-8051-dedbcbed187e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6fb5a3e-be69-4100-8051-dedbcbed187e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6fb5a3e-be69-4100-8051-dedbcbed187e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6fb5a3e-be69-4100-8051-dedbcbed187e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6fb5a3e-be69-4100-8051-dedbcbed187e","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6fb5a3e-be69-4100-8051-dedbcbed187e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6fb5a3e-be69-4100-8051-dedbcbed187e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d7410ce0-5eb4-4cb5-8cbc-87af27b23412","selected_subscription":"e2e-central-models-exempt-sub","selected_subscription_key":"models-as-a-service/e2e-central-models-exempt-sub@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"e2e-unconfigured-facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6fb5a3e-be69-4100-8051-dedbcbed187e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6fb5a3e-be69-4100-8051-dedbcbed187e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13293049-4dab-4fa3-b739-63b26f767f9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:62712","PortSpecifier":{"PortValue":62712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13293049-4dab-4fa3-b739-63b26f767f9a","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13293049-4dab-4fa3-b739-63b26f767f9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:62712","PortSpecifier":{"PortValue":62712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776783939,"nanos":707833604},"http":{"id":"13293049-4dab-4fa3-b739-63b26f767f9a","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13293049-4dab-4fa3-b739-63b26f767f9a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SXpk3RDLf6sUEYzd_RmJ17K9iBxoFu3FDfbtpSys8pMJL9SXfncJ2vSrr4IX"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13293049-4dab-4fa3-b739-63b26f767f9a","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SXpk3RDLf6sUEYzd_RmJ17K9iBxoFu3FDfbtpSys8pMJL9SXfncJ2vSrr4IX\"}"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13293049-4dab-4fa3-b739-63b26f767f9a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13293049-4dab-4fa3-b739-63b26f767f9a","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-central-models-exempt-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13293049-4dab-4fa3-b739-63b26f767f9a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-unconfigured-facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13293049-4dab-4fa3-b739-63b26f767f9a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13293049-4dab-4fa3-b739-63b26f767f9a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13293049-4dab-4fa3-b739-63b26f767f9a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13293049-4dab-4fa3-b739-63b26f767f9a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13293049-4dab-4fa3-b739-63b26f767f9a","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13293049-4dab-4fa3-b739-63b26f767f9a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13293049-4dab-4fa3-b739-63b26f767f9a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d7410ce0-5eb4-4cb5-8cbc-87af27b23412","selected_subscription":"e2e-central-models-exempt-sub","selected_subscription_key":"models-as-a-service/e2e-central-models-exempt-sub@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"e2e-unconfigured-facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13293049-4dab-4fa3-b739-63b26f767f9a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13293049-4dab-4fa3-b739-63b26f767f9a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc60e963-2c09-43e0-86e7-092924df8813","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:50520","PortSpecifier":{"PortValue":50520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc60e963-2c09-43e0-86e7-092924df8813","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc60e963-2c09-43e0-86e7-092924df8813","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:50520","PortSpecifier":{"PortValue":50520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776783939,"nanos":742347130},"http":{"id":"cc60e963-2c09-43e0-86e7-092924df8813","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc60e963-2c09-43e0-86e7-092924df8813","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SXpk3RDLf6sUEYzd_RmJ17K9iBxoFu3FDfbtpSys8pMJL9SXfncJ2vSrr4IX"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc60e963-2c09-43e0-86e7-092924df8813","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SXpk3RDLf6sUEYzd_RmJ17K9iBxoFu3FDfbtpSys8pMJL9SXfncJ2vSrr4IX\"}"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc60e963-2c09-43e0-86e7-092924df8813","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc60e963-2c09-43e0-86e7-092924df8813","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc60e963-2c09-43e0-86e7-092924df8813","config":{"Name":"api-key-valid","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc60e963-2c09-43e0-86e7-092924df8813","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc60e963-2c09-43e0-86e7-092924df8813","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc60e963-2c09-43e0-86e7-092924df8813","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc60e963-2c09-43e0-86e7-092924df8813","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc60e963-2c09-43e0-86e7-092924df8813","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3da1cb3-46b9-40e8-aa1e-0dad900b496f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:51190","PortSpecifier":{"PortValue":51190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3da1cb3-46b9-40e8-aa1e-0dad900b496f","method":"GET","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3da1cb3-46b9-40e8-aa1e-0dad900b496f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:51190","PortSpecifier":{"PortValue":51190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776783939,"nanos":749332855},"http":{"id":"d3da1cb3-46b9-40e8-aa1e-0dad900b496f","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3da1cb3-46b9-40e8-aa1e-0dad900b496f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SXpk3RDLf6sUEYzd_RmJ17K9iBxoFu3FDfbtpSys8pMJL9SXfncJ2vSrr4IX"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d3da1cb3-46b9-40e8-aa1e-0dad900b496f","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SXpk3RDLf6sUEYzd_RmJ17K9iBxoFu3FDfbtpSys8pMJL9SXfncJ2vSrr4IX\"}"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d3da1cb3-46b9-40e8-aa1e-0dad900b496f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d3da1cb3-46b9-40e8-aa1e-0dad900b496f","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-central-models-exempt-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d3da1cb3-46b9-40e8-aa1e-0dad900b496f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-unconfigured-facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3da1cb3-46b9-40e8-aa1e-0dad900b496f","input":{"auth":{"identity":"Bearer **** sk-oai-1SXpk3RDLf6sUEYzd_RmJ17K9iBxoFu3FDfbtpSys8pMJL9SXfncJ2vSrr4IX","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"e2e-unconfiab60ef4d3a239b5143b412cab04acac3-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.36~maas-default-gateway-openshift-default-58b6f876-vbvzt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-maas-subscription":"e2e-central-models-exempt-sub","x-request-id":"d3da1cb3-46b9-40e8-aa1e-0dad900b496f"},"host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","id":"d3da1cb3-46b9-40e8-aa1e-0dad900b496f","method":"GET","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":749332855,"seconds":1776783939}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51190},"address":"100.64.0.4:51190"}}}}},"destination":{"address":"10.134.0.36:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"},"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3da1cb3-46b9-40e8-aa1e-0dad900b496f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3da1cb3-46b9-40e8-aa1e-0dad900b496f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3da1cb3-46b9-40e8-aa1e-0dad900b496f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3da1cb3-46b9-40e8-aa1e-0dad900b496f","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3da1cb3-46b9-40e8-aa1e-0dad900b496f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3da1cb3-46b9-40e8-aa1e-0dad900b496f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d7410ce0-5eb4-4cb5-8cbc-87af27b23412","selected_subscription":"e2e-central-models-exempt-sub","selected_subscription_key":"models-as-a-service/e2e-central-models-exempt-sub@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"e2e-unconfigured-facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3da1cb3-46b9-40e8-aa1e-0dad900b496f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3da1cb3-46b9-40e8-aa1e-0dad900b496f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437"} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437"} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437"} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437"} {"level":"debug","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437"} {"level":"error","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"} {"level":"debug","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39"} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39"} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39"} {"level":"debug","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52"} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52"} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016"} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016"} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016"} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016"} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016"} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"debug","ts":"2026-04-21T15:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"info","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c12ceba3-4d47-4123-9c9a-f2c88f1623e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:1140","PortSpecifier":{"PortValue":1140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c12ceba3-4d47-4123-9c9a-f2c88f1623e7","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c12ceba3-4d47-4123-9c9a-f2c88f1623e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:1140","PortSpecifier":{"PortValue":1140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776783955,"nanos":565610166},"http":{"id":"c12ceba3-4d47-4123-9c9a-f2c88f1623e7","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c12ceba3-4d47-4123-9c9a-f2c88f1623e7","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c12ceba3-4d47-4123-9c9a-f2c88f1623e7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c12ceba3-4d47-4123-9c9a-f2c88f1623e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b73dfb9-9553-4985-b028-a73634777172","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7bf3965a-ceaf-49fd-ac09-6a56b764b517"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f491fcdd8f84"]}} {"level":"debug","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c12ceba3-4d47-4123-9c9a-f2c88f1623e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f491fcdd8f84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7bf3965a-ceaf-49fd-ac09-6a56b764b517"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b73dfb9-9553-4985-b028-a73634777172","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c12ceba3-4d47-4123-9c9a-f2c88f1623e7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c12ceba3-4d47-4123-9c9a-f2c88f1623e7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c12ceba3-4d47-4123-9c9a-f2c88f1623e7","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c12ceba3-4d47-4123-9c9a-f2c88f1623e7","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":"[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c12ceba3-4d47-4123-9c9a-f2c88f1623e7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c12ceba3-4d47-4123-9c9a-f2c88f1623e7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa35259f-6fb5-436d-8bec-dec0c5ae02cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:45612","PortSpecifier":{"PortValue":45612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa35259f-6fb5-436d-8bec-dec0c5ae02cd","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa35259f-6fb5-436d-8bec-dec0c5ae02cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:45612","PortSpecifier":{"PortValue":45612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776783955,"nanos":942483902},"http":{"id":"aa35259f-6fb5-436d-8bec-dec0c5ae02cd","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"info","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa35259f-6fb5-436d-8bec-dec0c5ae02cd","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}} {"level":"debug","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa35259f-6fb5-436d-8bec-dec0c5ae02cd","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** {"level":"info","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36850a52-b256-448b-9771-5a6916b2c554","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:35370","PortSpecifier":{"PortValue":35370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36850a52-b256-448b-9771-5a6916b2c554","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36850a52-b256-448b-9771-5a6916b2c554","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:35370","PortSpecifier":{"PortValue":35370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776783955,"nanos":970398393},"http":{"id":"36850a52-b256-448b-9771-5a6916b2c554","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-length":"83","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"httpbin.org:443/*","x-envoy-external-address":"100.64.0.2","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-request-id":"36850a52-b256-448b-9771-5a6916b2c554"},"path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016"},"metadata_context":{}}} {"level":"info","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36850a52-b256-448b-9771-5a6916b2c554","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}} {"level":"debug","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36850a52-b256-448b-9771-5a6916b2c554","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** {"level":"info","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99b44f11-3107-4c59-b6bf-8311b94b6823","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:47292","PortSpecifier":{"PortValue":47292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99b44f11-3107-4c59-b6bf-8311b94b6823","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99b44f11-3107-4c59-b6bf-8311b94b6823","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:47292","PortSpecifier":{"PortValue":47292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776783955,"nanos":998192475},"http":{"id":"99b44f11-3107-4c59-b6bf-8311b94b6823","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99b44f11-3107-4c59-b6bf-8311b94b6823","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-34BItz3KGUcff7N1_bwo5M9Wtphk8qTBAxHCxExIDHaWbtOrT0XmiNZ7cLu"} {"level":"debug","ts":"2026-04-21T15:05:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99b44f11-3107-4c59-b6bf-8311b94b6823","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-34BItz3KGUcff7N1_bwo5M9Wtphk8qTBAxHCxExIDHaWbtOrT0XmiNZ7cLu\"}"} {"level":"debug","ts":"2026-04-21T15:05:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99b44f11-3107-4c59-b6bf-8311b94b6823","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:05:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99b44f11-3107-4c59-b6bf-8311b94b6823","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-external-model\",\"requestedSubscription\":\"e2e-external-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-04-21T15:05:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99b44f11-3107-4c59-b6bf-8311b94b6823","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-external-model","namespace":"llm","token_rate_limits":[{"limit":10000,"window":"1h"}]}],"name":"e2e-external-subscription","namespace":"models-as-a-service","phase":"Active","ready":true}} {"level":"debug","ts":"2026-04-21T15:05:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99b44f11-3107-4c59-b6bf-8311b94b6823","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:05:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99b44f11-3107-4c59-b6bf-8311b94b6823","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:05:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99b44f11-3107-4c59-b6bf-8311b94b6823","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:05:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99b44f11-3107-4c59-b6bf-8311b94b6823","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:05:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99b44f11-3107-4c59-b6bf-8311b94b6823","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:05:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99b44f11-3107-4c59-b6bf-8311b94b6823","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-external-subscription"} {"level":"debug","ts":"2026-04-21T15:05:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99b44f11-3107-4c59-b6bf-8311b94b6823","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5c5d798a-67ab-487d-9383-a32ae9dfc400","selected_subscription":"e2e-external-subscription","selected_subscription_key":"models-as-a-service/e2e-external-subscription@llm/e2e-external-model","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"e2e-external-model","namespace":"llm","token_rate_limits":[{"limit":10000,"window":"1h"}]}],"name":"e2e-external-subscription","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-04-21T15:05:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99b44f11-3107-4c59-b6bf-8311b94b6823","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:05:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99b44f11-3107-4c59-b6bf-8311b94b6823","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:05:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98"} {"level":"info","ts":"2026-04-21T15:05:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98"} {"level":"info","ts":"2026-04-21T15:05:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98"} {"level":"info","ts":"2026-04-21T15:05:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:05:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"} {"level":"debug","ts":"2026-04-21T15:05:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"} {"level":"info","ts":"2026-04-21T15:05:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"} {"level":"info","ts":"2026-04-21T15:05:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:05:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:05:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"} {"level":"info","ts":"2026-04-21T15:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4"} {"level":"info","ts":"2026-04-21T15:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"} {"level":"info","ts":"2026-04-21T15:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4"} {"level":"info","ts":"2026-04-21T15:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:05:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:05:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"} {"level":"info","ts":"2026-04-21T15:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"} {"level":"info","ts":"2026-04-21T15:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98"} {"level":"info","ts":"2026-04-21T15:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4"} {"level":"info","ts":"2026-04-21T15:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"} {"level":"info","ts":"2026-04-21T15:06:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8549e25-2f38-41c3-83c7-2ea510c3228f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3534","PortSpecifier":{"PortValue":3534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8549e25-2f38-41c3-83c7-2ea510c3228f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:06:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8549e25-2f38-41c3-83c7-2ea510c3228f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3534","PortSpecifier":{"PortValue":3534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776783993,"nanos":712322584},"http":{"id":"f8549e25-2f38-41c3-83c7-2ea510c3228f","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:06:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8549e25-2f38-41c3-83c7-2ea510c3228f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784293,"groups":["Engineering","Project-Alpha"],"iat":1776783993,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ef502815-f729-921d-dc2c-d2d090678572","preferred_username":"alice_lead","scope":"profile email","sid":"MOy4lEUieEdxpfPhlOpdVPkr","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8549e25-2f38-41c3-83c7-2ea510c3228f","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784293,"groups":["Engineering","Project-Alpha"],"iat":1776783993,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ef502815-f729-921d-dc2c-d2d090678572","preferred_username":"alice_lead","scope":"profile email","sid":"MOy4lEUieEdxpfPhlOpdVPkr","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8549e25-2f38-41c3-83c7-2ea510c3228f","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8549e25-2f38-41c3-83c7-2ea510c3228f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8549e25-2f38-41c3-83c7-2ea510c3228f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8549e25-2f38-41c3-83c7-2ea510c3228f","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8549e25-2f38-41c3-83c7-2ea510c3228f","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8549e25-2f38-41c3-83c7-2ea510c3228f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8549e25-2f38-41c3-83c7-2ea510c3228f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016"} {"level":"info","ts":"2026-04-21T15:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"} {"level":"info","ts":"2026-04-21T15:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"info","ts":"2026-04-21T15:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52"} {"level":"info","ts":"2026-04-21T15:06:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f193864-00fa-49e6-92c1-da95ace77967","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:22772","PortSpecifier":{"PortValue":22772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f193864-00fa-49e6-92c1-da95ace77967","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:06:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f193864-00fa-49e6-92c1-da95ace77967","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:22772","PortSpecifier":{"PortValue":22772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776783998,"nanos":744989784},"http":{"id":"2f193864-00fa-49e6-92c1-da95ace77967","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:06:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f193864-00fa-49e6-92c1-da95ace77967","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784293,"groups":["Engineering","Project-Alpha"],"iat":1776783993,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ef502815-f729-921d-dc2c-d2d090678572","preferred_username":"alice_lead","scope":"profile email","sid":"MOy4lEUieEdxpfPhlOpdVPkr","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:06:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f193864-00fa-49e6-92c1-da95ace77967","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784293,"groups":["Engineering","Project-Alpha"],"iat":1776783993,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ef502815-f729-921d-dc2c-d2d090678572","preferred_username":"alice_lead","scope":"profile email","sid":"MOy4lEUieEdxpfPhlOpdVPkr","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:06:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f193864-00fa-49e6-92c1-da95ace77967","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:06:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f193864-00fa-49e6-92c1-da95ace77967","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:06:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f193864-00fa-49e6-92c1-da95ace77967","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:06:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f193864-00fa-49e6-92c1-da95ace77967","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:06:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f193864-00fa-49e6-92c1-da95ace77967","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:06:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f193864-00fa-49e6-92c1-da95ace77967","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:06:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f193864-00fa-49e6-92c1-da95ace77967","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:06:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49d74641-6745-4a62-a22a-0f1cbec101d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:9028","PortSpecifier":{"PortValue":9028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"49d74641-6745-4a62-a22a-0f1cbec101d5","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:06:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49d74641-6745-4a62-a22a-0f1cbec101d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:9028","PortSpecifier":{"PortValue":9028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784003,"nanos":778016346},"http":{"id":"49d74641-6745-4a62-a22a-0f1cbec101d5","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:06:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"49d74641-6745-4a62-a22a-0f1cbec101d5","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784293,"groups":["Engineering","Project-Alpha"],"iat":1776783993,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ef502815-f729-921d-dc2c-d2d090678572","preferred_username":"alice_lead","scope":"profile email","sid":"MOy4lEUieEdxpfPhlOpdVPkr","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:06:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"49d74641-6745-4a62-a22a-0f1cbec101d5","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784293,"groups":["Engineering","Project-Alpha"],"iat":1776783993,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ef502815-f729-921d-dc2c-d2d090678572","preferred_username":"alice_lead","scope":"profile email","sid":"MOy4lEUieEdxpfPhlOpdVPkr","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:06:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49d74641-6745-4a62-a22a-0f1cbec101d5","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:06:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49d74641-6745-4a62-a22a-0f1cbec101d5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:06:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49d74641-6745-4a62-a22a-0f1cbec101d5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:06:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49d74641-6745-4a62-a22a-0f1cbec101d5","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:06:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49d74641-6745-4a62-a22a-0f1cbec101d5","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:06:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49d74641-6745-4a62-a22a-0f1cbec101d5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:06:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49d74641-6745-4a62-a22a-0f1cbec101d5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:06:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c00965ac-b39e-4495-aa5a-4445045692f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:62460","PortSpecifier":{"PortValue":62460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c00965ac-b39e-4495-aa5a-4445045692f1","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:06:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c00965ac-b39e-4495-aa5a-4445045692f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:62460","PortSpecifier":{"PortValue":62460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784008,"nanos":812635692},"http":{"id":"c00965ac-b39e-4495-aa5a-4445045692f1","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:06:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c00965ac-b39e-4495-aa5a-4445045692f1","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784293,"groups":["Engineering","Project-Alpha"],"iat":1776783993,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ef502815-f729-921d-dc2c-d2d090678572","preferred_username":"alice_lead","scope":"profile email","sid":"MOy4lEUieEdxpfPhlOpdVPkr","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:06:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c00965ac-b39e-4495-aa5a-4445045692f1","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784293,"groups":["Engineering","Project-Alpha"],"iat":1776783993,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ef502815-f729-921d-dc2c-d2d090678572","preferred_username":"alice_lead","scope":"profile email","sid":"MOy4lEUieEdxpfPhlOpdVPkr","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:06:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c00965ac-b39e-4495-aa5a-4445045692f1","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:06:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c00965ac-b39e-4495-aa5a-4445045692f1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:06:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c00965ac-b39e-4495-aa5a-4445045692f1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:06:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c00965ac-b39e-4495-aa5a-4445045692f1","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:06:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c00965ac-b39e-4495-aa5a-4445045692f1","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:06:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c00965ac-b39e-4495-aa5a-4445045692f1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:06:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c00965ac-b39e-4495-aa5a-4445045692f1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:06:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3e0381f-5a22-4d16-97ee-1d12c823ca5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:13418","PortSpecifier":{"PortValue":13418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a3e0381f-5a22-4d16-97ee-1d12c823ca5d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:06:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3e0381f-5a22-4d16-97ee-1d12c823ca5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:13418","PortSpecifier":{"PortValue":13418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784013,"nanos":844764830},"http":{"id":"a3e0381f-5a22-4d16-97ee-1d12c823ca5d","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:06:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a3e0381f-5a22-4d16-97ee-1d12c823ca5d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784293,"groups":["Engineering","Project-Alpha"],"iat":1776783993,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ef502815-f729-921d-dc2c-d2d090678572","preferred_username":"alice_lead","scope":"profile email","sid":"MOy4lEUieEdxpfPhlOpdVPkr","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:06:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a3e0381f-5a22-4d16-97ee-1d12c823ca5d","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784293,"groups":["Engineering","Project-Alpha"],"iat":1776783993,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ef502815-f729-921d-dc2c-d2d090678572","preferred_username":"alice_lead","scope":"profile email","sid":"MOy4lEUieEdxpfPhlOpdVPkr","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:06:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3e0381f-5a22-4d16-97ee-1d12c823ca5d","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:06:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3e0381f-5a22-4d16-97ee-1d12c823ca5d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:06:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3e0381f-5a22-4d16-97ee-1d12c823ca5d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:06:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3e0381f-5a22-4d16-97ee-1d12c823ca5d","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:06:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3e0381f-5a22-4d16-97ee-1d12c823ca5d","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:06:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3e0381f-5a22-4d16-97ee-1d12c823ca5d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:06:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3e0381f-5a22-4d16-97ee-1d12c823ca5d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:06:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fea464b-3f2e-4f24-b3ab-94bc3843e00a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:31716","PortSpecifier":{"PortValue":31716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9fea464b-3f2e-4f24-b3ab-94bc3843e00a","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:06:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fea464b-3f2e-4f24-b3ab-94bc3843e00a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:31716","PortSpecifier":{"PortValue":31716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784018,"nanos":876324451},"http":{"id":"9fea464b-3f2e-4f24-b3ab-94bc3843e00a","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:06:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9fea464b-3f2e-4f24-b3ab-94bc3843e00a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784293,"groups":["Engineering","Project-Alpha"],"iat":1776783993,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ef502815-f729-921d-dc2c-d2d090678572","preferred_username":"alice_lead","scope":"profile email","sid":"MOy4lEUieEdxpfPhlOpdVPkr","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9fea464b-3f2e-4f24-b3ab-94bc3843e00a","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784293,"groups":["Engineering","Project-Alpha"],"iat":1776783993,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ef502815-f729-921d-dc2c-d2d090678572","preferred_username":"alice_lead","scope":"profile email","sid":"MOy4lEUieEdxpfPhlOpdVPkr","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fea464b-3f2e-4f24-b3ab-94bc3843e00a","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fea464b-3f2e-4f24-b3ab-94bc3843e00a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fea464b-3f2e-4f24-b3ab-94bc3843e00a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fea464b-3f2e-4f24-b3ab-94bc3843e00a","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fea464b-3f2e-4f24-b3ab-94bc3843e00a","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:06:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fea464b-3f2e-4f24-b3ab-94bc3843e00a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:06:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fea464b-3f2e-4f24-b3ab-94bc3843e00a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:07:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f71797c-b9e3-464b-92f4-5b22f13ed362","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:5236","PortSpecifier":{"PortValue":5236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f71797c-b9e3-464b-92f4-5b22f13ed362","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f71797c-b9e3-464b-92f4-5b22f13ed362","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:5236","PortSpecifier":{"PortValue":5236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784023,"nanos":908033785},"http":{"id":"7f71797c-b9e3-464b-92f4-5b22f13ed362","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f71797c-b9e3-464b-92f4-5b22f13ed362","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784293,"groups":["Engineering","Project-Alpha"],"iat":1776783993,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ef502815-f729-921d-dc2c-d2d090678572","preferred_username":"alice_lead","scope":"profile email","sid":"MOy4lEUieEdxpfPhlOpdVPkr","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f71797c-b9e3-464b-92f4-5b22f13ed362","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784293,"groups":["Engineering","Project-Alpha"],"iat":1776783993,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ef502815-f729-921d-dc2c-d2d090678572","preferred_username":"alice_lead","scope":"profile email","sid":"MOy4lEUieEdxpfPhlOpdVPkr","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f71797c-b9e3-464b-92f4-5b22f13ed362","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:07:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f71797c-b9e3-464b-92f4-5b22f13ed362","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:07:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f71797c-b9e3-464b-92f4-5b22f13ed362","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:07:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f71797c-b9e3-464b-92f4-5b22f13ed362","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:07:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f71797c-b9e3-464b-92f4-5b22f13ed362","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:07:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f71797c-b9e3-464b-92f4-5b22f13ed362","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:07:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f71797c-b9e3-464b-92f4-5b22f13ed362","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:07:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90ddc91d-7795-4740-b937-5a59ce3e8af2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:61052","PortSpecifier":{"PortValue":61052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90ddc91d-7795-4740-b937-5a59ce3e8af2","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90ddc91d-7795-4740-b937-5a59ce3e8af2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:61052","PortSpecifier":{"PortValue":61052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784028,"nanos":939373376},"http":{"id":"90ddc91d-7795-4740-b937-5a59ce3e8af2","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90ddc91d-7795-4740-b937-5a59ce3e8af2","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784293,"groups":["Engineering","Project-Alpha"],"iat":1776783993,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ef502815-f729-921d-dc2c-d2d090678572","preferred_username":"alice_lead","scope":"profile email","sid":"MOy4lEUieEdxpfPhlOpdVPkr","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:07:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90ddc91d-7795-4740-b937-5a59ce3e8af2","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784293,"groups":["Engineering","Project-Alpha"],"iat":1776783993,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ef502815-f729-921d-dc2c-d2d090678572","preferred_username":"alice_lead","scope":"profile email","sid":"MOy4lEUieEdxpfPhlOpdVPkr","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90ddc91d-7795-4740-b937-5a59ce3e8af2","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:07:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90ddc91d-7795-4740-b937-5a59ce3e8af2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:07:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90ddc91d-7795-4740-b937-5a59ce3e8af2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:07:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90ddc91d-7795-4740-b937-5a59ce3e8af2","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:07:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90ddc91d-7795-4740-b937-5a59ce3e8af2","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:07:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90ddc91d-7795-4740-b937-5a59ce3e8af2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:07:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90ddc91d-7795-4740-b937-5a59ce3e8af2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:07:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25cd3c4a-f41c-4507-8fea-6d7cfe282c06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:30896","PortSpecifier":{"PortValue":30896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25cd3c4a-f41c-4507-8fea-6d7cfe282c06","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25cd3c4a-f41c-4507-8fea-6d7cfe282c06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:30896","PortSpecifier":{"PortValue":30896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784033,"nanos":987552285},"http":{"id":"25cd3c4a-f41c-4507-8fea-6d7cfe282c06","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25cd3c4a-f41c-4507-8fea-6d7cfe282c06","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784293,"groups":["Engineering","Project-Alpha"],"iat":1776783993,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ef502815-f729-921d-dc2c-d2d090678572","preferred_username":"alice_lead","scope":"profile email","sid":"MOy4lEUieEdxpfPhlOpdVPkr","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:07:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25cd3c4a-f41c-4507-8fea-6d7cfe282c06","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784293,"groups":["Engineering","Project-Alpha"],"iat":1776783993,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ef502815-f729-921d-dc2c-d2d090678572","preferred_username":"alice_lead","scope":"profile email","sid":"MOy4lEUieEdxpfPhlOpdVPkr","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25cd3c4a-f41c-4507-8fea-6d7cfe282c06","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:07:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25cd3c4a-f41c-4507-8fea-6d7cfe282c06","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:07:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25cd3c4a-f41c-4507-8fea-6d7cfe282c06","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:07:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25cd3c4a-f41c-4507-8fea-6d7cfe282c06","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:07:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25cd3c4a-f41c-4507-8fea-6d7cfe282c06","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:07:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25cd3c4a-f41c-4507-8fea-6d7cfe282c06","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:07:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25cd3c4a-f41c-4507-8fea-6d7cfe282c06","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21e68fe9-e5de-4c69-bca8-548d07247732","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:36082","PortSpecifier":{"PortValue":36082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21e68fe9-e5de-4c69-bca8-548d07247732","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21e68fe9-e5de-4c69-bca8-548d07247732","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:36082","PortSpecifier":{"PortValue":36082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784034,"nanos":91587290},"http":{"id":"21e68fe9-e5de-4c69-bca8-548d07247732","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"21e68fe9-e5de-4c69-bca8-548d07247732","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"21e68fe9-e5de-4c69-bca8-548d07247732","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"21e68fe9-e5de-4c69-bca8-548d07247732","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"not authenticated"} {"level":"info","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21e68fe9-e5de-4c69-bca8-548d07247732","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}"}} {"level":"debug","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21e68fe9-e5de-4c69-bca8-548d07247732","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}} {"level":"info","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b482c8f-8124-4dc0-927f-f0ad5cc95063","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:59364","PortSpecifier":{"PortValue":59364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b482c8f-8124-4dc0-927f-f0ad5cc95063","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b482c8f-8124-4dc0-927f-f0ad5cc95063","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:59364","PortSpecifier":{"PortValue":59364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784034,"nanos":159984008},"http":{"id":"3b482c8f-8124-4dc0-927f-f0ad5cc95063","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer","content-length":"35","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.36~maas-default-gateway-openshift-default-58b6f876-vbvzt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-request-id":"3b482c8f-8124-4dc0-927f-f0ad5cc95063"},"path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"metadata_context":{}}} {"level":"debug","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"3b482c8f-8124-4dc0-927f-f0ad5cc95063","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"credential not found"} {"level":"info","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b482c8f-8124-4dc0-927f-f0ad5cc95063","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"openshift-identities\":\"credential not found\"}"}} {"level":"debug","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b482c8f-8124-4dc0-927f-f0ad5cc95063","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"openshift-identities\":\"credential not found\"}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}} {"level":"info","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05fe029e-153a-440b-81d9-1a0b8d7767e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:57258","PortSpecifier":{"PortValue":57258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05fe029e-153a-440b-81d9-1a0b8d7767e8","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05fe029e-153a-440b-81d9-1a0b8d7767e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:57258","PortSpecifier":{"PortValue":57258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784034,"nanos":183585214},"http":{"id":"05fe029e-153a-440b-81d9-1a0b8d7767e8","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-length":"36","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.36~maas-default-gateway-openshift-default-58b6f876-vbvzt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-request-id":"05fe029e-153a-440b-81d9-1a0b8d7767e8"},"path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"metadata_context":{}}} {"level":"info","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05fe029e-153a-440b-81d9-1a0b8d7767e8","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}"}} {"level":"debug","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05fe029e-153a-440b-81d9-1a0b8d7767e8","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}} {"level":"info","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c56261c9-f8c4-47be-8463-6c7cc2917113","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:18176","PortSpecifier":{"PortValue":18176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c56261c9-f8c4-47be-8463-6c7cc2917113","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c56261c9-f8c4-47be-8463-6c7cc2917113","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:18176","PortSpecifier":{"PortValue":18176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784034,"nanos":545972923},"http":{"id":"c56261c9-f8c4-47be-8463-6c7cc2917113","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c56261c9-f8c4-47be-8463-6c7cc2917113","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784334,"groups":["Site-Reliability"],"iat":1776784034,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:a6454fdb-3b21-7970-9408-521c26253827","preferred_username":"bob_sre","scope":"profile email","sid":"sNYpPK-ICvIOa8KILR3JYI1y","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c56261c9-f8c4-47be-8463-6c7cc2917113","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784334,"groups":["Site-Reliability"],"iat":1776784034,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:a6454fdb-3b21-7970-9408-521c26253827","preferred_username":"bob_sre","scope":"profile email","sid":"sNYpPK-ICvIOa8KILR3JYI1y","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c56261c9-f8c4-47be-8463-6c7cc2917113","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c56261c9-f8c4-47be-8463-6c7cc2917113","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"} {"level":"debug","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c56261c9-f8c4-47be-8463-6c7cc2917113","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"} {"level":"debug","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c56261c9-f8c4-47be-8463-6c7cc2917113","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c56261c9-f8c4-47be-8463-6c7cc2917113","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c56261c9-f8c4-47be-8463-6c7cc2917113","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c56261c9-f8c4-47be-8463-6c7cc2917113","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:07:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d1b728d-0918-47c3-ae8f-981837170b6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54660","PortSpecifier":{"PortValue":54660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d1b728d-0918-47c3-ae8f-981837170b6d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d1b728d-0918-47c3-ae8f-981837170b6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54660","PortSpecifier":{"PortValue":54660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784039,"nanos":589153752},"http":{"id":"8d1b728d-0918-47c3-ae8f-981837170b6d","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d1b728d-0918-47c3-ae8f-981837170b6d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784334,"groups":["Site-Reliability"],"iat":1776784034,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:a6454fdb-3b21-7970-9408-521c26253827","preferred_username":"bob_sre","scope":"profile email","sid":"sNYpPK-ICvIOa8KILR3JYI1y","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:07:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d1b728d-0918-47c3-ae8f-981837170b6d","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784334,"groups":["Site-Reliability"],"iat":1776784034,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:a6454fdb-3b21-7970-9408-521c26253827","preferred_username":"bob_sre","scope":"profile email","sid":"sNYpPK-ICvIOa8KILR3JYI1y","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d1b728d-0918-47c3-ae8f-981837170b6d","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:07:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d1b728d-0918-47c3-ae8f-981837170b6d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"} {"level":"debug","ts":"2026-04-21T15:07:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d1b728d-0918-47c3-ae8f-981837170b6d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"} {"level":"debug","ts":"2026-04-21T15:07:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d1b728d-0918-47c3-ae8f-981837170b6d","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:07:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d1b728d-0918-47c3-ae8f-981837170b6d","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:07:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d1b728d-0918-47c3-ae8f-981837170b6d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:07:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d1b728d-0918-47c3-ae8f-981837170b6d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f492e87a-d282-483d-9ad8-98e049212424","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:10094","PortSpecifier":{"PortValue":10094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f492e87a-d282-483d-9ad8-98e049212424","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f492e87a-d282-483d-9ad8-98e049212424","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:10094","PortSpecifier":{"PortValue":10094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784044,"nanos":623181136},"http":{"id":"f492e87a-d282-483d-9ad8-98e049212424","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f492e87a-d282-483d-9ad8-98e049212424","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784334,"groups":["Site-Reliability"],"iat":1776784034,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:a6454fdb-3b21-7970-9408-521c26253827","preferred_username":"bob_sre","scope":"profile email","sid":"sNYpPK-ICvIOa8KILR3JYI1y","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f492e87a-d282-483d-9ad8-98e049212424","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784334,"groups":["Site-Reliability"],"iat":1776784034,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:a6454fdb-3b21-7970-9408-521c26253827","preferred_username":"bob_sre","scope":"profile email","sid":"sNYpPK-ICvIOa8KILR3JYI1y","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f492e87a-d282-483d-9ad8-98e049212424","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f492e87a-d282-483d-9ad8-98e049212424","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"} {"level":"debug","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f492e87a-d282-483d-9ad8-98e049212424","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"} {"level":"debug","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f492e87a-d282-483d-9ad8-98e049212424","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f492e87a-d282-483d-9ad8-98e049212424","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f492e87a-d282-483d-9ad8-98e049212424","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f492e87a-d282-483d-9ad8-98e049212424","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06329084-6f36-47fa-8a23-720e91edcd3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:2998","PortSpecifier":{"PortValue":2998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06329084-6f36-47fa-8a23-720e91edcd3b","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06329084-6f36-47fa-8a23-720e91edcd3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:2998","PortSpecifier":{"PortValue":2998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784044,"nanos":845181767},"http":{"id":"06329084-6f36-47fa-8a23-720e91edcd3b","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06329084-6f36-47fa-8a23-720e91edcd3b","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784344,"groups":["Engineering","Project-Alpha"],"iat":1776784044,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:d3da8a7c-410e-8ebe-c2cc-bd67e34fbab3","preferred_username":"alice_lead","scope":"profile email","sid":"D7IACgjF30M0IEX7G7zTEvsk","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06329084-6f36-47fa-8a23-720e91edcd3b","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784344,"groups":["Engineering","Project-Alpha"],"iat":1776784044,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:d3da8a7c-410e-8ebe-c2cc-bd67e34fbab3","preferred_username":"alice_lead","scope":"profile email","sid":"D7IACgjF30M0IEX7G7zTEvsk","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06329084-6f36-47fa-8a23-720e91edcd3b","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06329084-6f36-47fa-8a23-720e91edcd3b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06329084-6f36-47fa-8a23-720e91edcd3b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06329084-6f36-47fa-8a23-720e91edcd3b","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06329084-6f36-47fa-8a23-720e91edcd3b","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06329084-6f36-47fa-8a23-720e91edcd3b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:07:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06329084-6f36-47fa-8a23-720e91edcd3b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:07:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"545f670c-9fd1-47d6-8012-cc0acc932c93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:17592","PortSpecifier":{"PortValue":17592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"545f670c-9fd1-47d6-8012-cc0acc932c93","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"545f670c-9fd1-47d6-8012-cc0acc932c93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:17592","PortSpecifier":{"PortValue":17592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784049,"nanos":876705807},"http":{"id":"545f670c-9fd1-47d6-8012-cc0acc932c93","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"545f670c-9fd1-47d6-8012-cc0acc932c93","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784344,"groups":["Engineering","Project-Alpha"],"iat":1776784044,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:d3da8a7c-410e-8ebe-c2cc-bd67e34fbab3","preferred_username":"alice_lead","scope":"profile email","sid":"D7IACgjF30M0IEX7G7zTEvsk","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:07:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"545f670c-9fd1-47d6-8012-cc0acc932c93","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784344,"groups":["Engineering","Project-Alpha"],"iat":1776784044,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:d3da8a7c-410e-8ebe-c2cc-bd67e34fbab3","preferred_username":"alice_lead","scope":"profile email","sid":"D7IACgjF30M0IEX7G7zTEvsk","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"545f670c-9fd1-47d6-8012-cc0acc932c93","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:07:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"545f670c-9fd1-47d6-8012-cc0acc932c93","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:07:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"545f670c-9fd1-47d6-8012-cc0acc932c93","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:07:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"545f670c-9fd1-47d6-8012-cc0acc932c93","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:07:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"545f670c-9fd1-47d6-8012-cc0acc932c93","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:07:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"545f670c-9fd1-47d6-8012-cc0acc932c93","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:07:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"545f670c-9fd1-47d6-8012-cc0acc932c93","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94ed370e-a21c-4906-a73d-9ba37b1642a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20110","PortSpecifier":{"PortValue":20110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94ed370e-a21c-4906-a73d-9ba37b1642a0","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94ed370e-a21c-4906-a73d-9ba37b1642a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20110","PortSpecifier":{"PortValue":20110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784054,"nanos":905742653},"http":{"id":"94ed370e-a21c-4906-a73d-9ba37b1642a0","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94ed370e-a21c-4906-a73d-9ba37b1642a0","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784344,"groups":["Engineering","Project-Alpha"],"iat":1776784044,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:d3da8a7c-410e-8ebe-c2cc-bd67e34fbab3","preferred_username":"alice_lead","scope":"profile email","sid":"D7IACgjF30M0IEX7G7zTEvsk","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94ed370e-a21c-4906-a73d-9ba37b1642a0","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784344,"groups":["Engineering","Project-Alpha"],"iat":1776784044,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:d3da8a7c-410e-8ebe-c2cc-bd67e34fbab3","preferred_username":"alice_lead","scope":"profile email","sid":"D7IACgjF30M0IEX7G7zTEvsk","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94ed370e-a21c-4906-a73d-9ba37b1642a0","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94ed370e-a21c-4906-a73d-9ba37b1642a0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94ed370e-a21c-4906-a73d-9ba37b1642a0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94ed370e-a21c-4906-a73d-9ba37b1642a0","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94ed370e-a21c-4906-a73d-9ba37b1642a0","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94ed370e-a21c-4906-a73d-9ba37b1642a0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94ed370e-a21c-4906-a73d-9ba37b1642a0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97b4be72-c6c9-4982-b6e0-18ba265f4248","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:50124","PortSpecifier":{"PortValue":50124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97b4be72-c6c9-4982-b6e0-18ba265f4248","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97b4be72-c6c9-4982-b6e0-18ba265f4248","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:50124","PortSpecifier":{"PortValue":50124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784054,"nanos":931876140},"http":{"id":"97b4be72-c6c9-4982-b6e0-18ba265f4248","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97b4be72-c6c9-4982-b6e0-18ba265f4248","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Xkhx0jwOojAVEb5u_KL6vAzOsD3VB0yYo2gDafQjmFsJDX1faFgDNwUYRD2i"} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97b4be72-c6c9-4982-b6e0-18ba265f4248","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Xkhx0jwOojAVEb5u_KL6vAzOsD3VB0yYo2gDafQjmFsJDX1faFgDNwUYRD2i\"}"} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97b4be72-c6c9-4982-b6e0-18ba265f4248","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97b4be72-c6c9-4982-b6e0-18ba265f4248","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97b4be72-c6c9-4982-b6e0-18ba265f4248","config":{"Name":"api-key-valid","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97b4be72-c6c9-4982-b6e0-18ba265f4248","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97b4be72-c6c9-4982-b6e0-18ba265f4248","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97b4be72-c6c9-4982-b6e0-18ba265f4248","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"info","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97b4be72-c6c9-4982-b6e0-18ba265f4248","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97b4be72-c6c9-4982-b6e0-18ba265f4248","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8186b616-f309-40ab-b2e2-1b2b32cdba59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:50036","PortSpecifier":{"PortValue":50036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8186b616-f309-40ab-b2e2-1b2b32cdba59","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8186b616-f309-40ab-b2e2-1b2b32cdba59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:50036","PortSpecifier":{"PortValue":50036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784054,"nanos":956291655},"http":{"id":"8186b616-f309-40ab-b2e2-1b2b32cdba59","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8186b616-f309-40ab-b2e2-1b2b32cdba59","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Xkhx0jwOojAVEb5u_KL6vAzOsD3VB0yYo2gDafQjmFsJDX1faFgDNwUYRD2i"} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8186b616-f309-40ab-b2e2-1b2b32cdba59","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Xkhx0jwOojAVEb5u_KL6vAzOsD3VB0yYo2gDafQjmFsJDX1faFgDNwUYRD2i\"}"} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8186b616-f309-40ab-b2e2-1b2b32cdba59","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8186b616-f309-40ab-b2e2-1b2b32cdba59","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8186b616-f309-40ab-b2e2-1b2b32cdba59","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8186b616-f309-40ab-b2e2-1b2b32cdba59","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"e716e70ac29d4c7bea453bb99861c5f15b3d9860b623d5ef2c7badd4e1cb9bc9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-Xkhx0jwOojAVEb5u_KL6vAzOsD3VB0yYo2gDafQjmFsJDX1faFgDNwUYRD2i","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.36~maas-default-gateway-openshift-default-58b6f876-vbvzt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"8186b616-f309-40ab-b2e2-1b2b32cdba59"},"host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","id":"8186b616-f309-40ab-b2e2-1b2b32cdba59","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":956291655,"seconds":1776784054},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"100.64.0.4:50036","port":50036}}} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8186b616-f309-40ab-b2e2-1b2b32cdba59","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8186b616-f309-40ab-b2e2-1b2b32cdba59","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8186b616-f309-40ab-b2e2-1b2b32cdba59","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8186b616-f309-40ab-b2e2-1b2b32cdba59","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8186b616-f309-40ab-b2e2-1b2b32cdba59","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8186b616-f309-40ab-b2e2-1b2b32cdba59","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"4933a967-17f6-4e1d-8a42-61734856238d","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}} {"level":"info","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8186b616-f309-40ab-b2e2-1b2b32cdba59","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8186b616-f309-40ab-b2e2-1b2b32cdba59","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d397c76-a49a-4354-b59c-9a57627800b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:9876","PortSpecifier":{"PortValue":9876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d397c76-a49a-4354-b59c-9a57627800b0","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d397c76-a49a-4354-b59c-9a57627800b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:9876","PortSpecifier":{"PortValue":9876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784054,"nanos":981004344},"http":{"id":"2d397c76-a49a-4354-b59c-9a57627800b0","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d397c76-a49a-4354-b59c-9a57627800b0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Xkhx0jwOojAVEb5u_KL6vAzOsD3VB0yYo2gDafQjmFsJDX1faFgDNwUYRD2i"} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2d397c76-a49a-4354-b59c-9a57627800b0","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Xkhx0jwOojAVEb5u_KL6vAzOsD3VB0yYo2gDafQjmFsJDX1faFgDNwUYRD2i\"}"} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2d397c76-a49a-4354-b59c-9a57627800b0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2d397c76-a49a-4354-b59c-9a57627800b0","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2d397c76-a49a-4354-b59c-9a57627800b0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d397c76-a49a-4354-b59c-9a57627800b0","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"5aa0fd746a1cbe4557cf771f0b5f5c4020da5a6444c58d701a6d039232d7faab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d397c76-a49a-4354-b59c-9a57627800b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d397c76-a49a-4354-b59c-9a57627800b0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d397c76-a49a-4354-b59c-9a57627800b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d397c76-a49a-4354-b59c-9a57627800b0","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d397c76-a49a-4354-b59c-9a57627800b0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d397c76-a49a-4354-b59c-9a57627800b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"4933a967-17f6-4e1d-8a42-61734856238d","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}} {"level":"info","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d397c76-a49a-4354-b59c-9a57627800b0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:07:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d397c76-a49a-4354-b59c-9a57627800b0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"000673f5-73e9-411a-b6e0-de2f84230023","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:2922","PortSpecifier":{"PortValue":2922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"000673f5-73e9-411a-b6e0-de2f84230023","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"000673f5-73e9-411a-b6e0-de2f84230023","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:2922","PortSpecifier":{"PortValue":2922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784055,"nanos":73310196},"http":{"id":"000673f5-73e9-411a-b6e0-de2f84230023","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"000673f5-73e9-411a-b6e0-de2f84230023","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784355,"groups":["Engineering","Project-Alpha"],"iat":1776784055,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:dca64c2f-9b6c-1c4d-6157-56379d7f91d3","preferred_username":"alice_lead","scope":"profile email","sid":"mtewSqFuptbrkmmKmn0clzYE","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"000673f5-73e9-411a-b6e0-de2f84230023","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784355,"groups":["Engineering","Project-Alpha"],"iat":1776784055,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:dca64c2f-9b6c-1c4d-6157-56379d7f91d3","preferred_username":"alice_lead","scope":"profile email","sid":"mtewSqFuptbrkmmKmn0clzYE","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"000673f5-73e9-411a-b6e0-de2f84230023","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"000673f5-73e9-411a-b6e0-de2f84230023","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"000673f5-73e9-411a-b6e0-de2f84230023","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"000673f5-73e9-411a-b6e0-de2f84230023","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"000673f5-73e9-411a-b6e0-de2f84230023","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"000673f5-73e9-411a-b6e0-de2f84230023","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"000673f5-73e9-411a-b6e0-de2f84230023","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7b70ecc-fcdd-4ce2-8e5a-d783c592f021","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20122","PortSpecifier":{"PortValue":20122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7b70ecc-fcdd-4ce2-8e5a-d783c592f021","method":"DELETE","path":"/maas-api/v1/api-keys/e8aa6f3b-4553-487e-a748-b7307d235bf1","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7b70ecc-fcdd-4ce2-8e5a-d783c592f021","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20122","PortSpecifier":{"PortValue":20122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784055,"nanos":94378737},"http":{"id":"f7b70ecc-fcdd-4ce2-8e5a-d783c592f021","method":"DELETE","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/e8aa6f3b-4553-487e-a748-b7307d235bf1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7b70ecc-fcdd-4ce2-8e5a-d783c592f021","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784355,"groups":["Engineering","Project-Alpha"],"iat":1776784055,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:dca64c2f-9b6c-1c4d-6157-56379d7f91d3","preferred_username":"alice_lead","scope":"profile email","sid":"mtewSqFuptbrkmmKmn0clzYE","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7b70ecc-fcdd-4ce2-8e5a-d783c592f021","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784355,"groups":["Engineering","Project-Alpha"],"iat":1776784055,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:dca64c2f-9b6c-1c4d-6157-56379d7f91d3","preferred_username":"alice_lead","scope":"profile email","sid":"mtewSqFuptbrkmmKmn0clzYE","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/e8aa6f3b-4553-487e-a748-b7307d235bf1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7b70ecc-fcdd-4ce2-8e5a-d783c592f021","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7b70ecc-fcdd-4ce2-8e5a-d783c592f021","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7b70ecc-fcdd-4ce2-8e5a-d783c592f021","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7b70ecc-fcdd-4ce2-8e5a-d783c592f021","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7b70ecc-fcdd-4ce2-8e5a-d783c592f021","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7b70ecc-fcdd-4ce2-8e5a-d783c592f021","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7b70ecc-fcdd-4ce2-8e5a-d783c592f021","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:07:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea6e7c74-3807-4c82-8107-083695406b37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:43086","PortSpecifier":{"PortValue":43086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea6e7c74-3807-4c82-8107-083695406b37","method":"DELETE","path":"/maas-api/v1/api-keys/e8aa6f3b-4553-487e-a748-b7307d235bf1","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea6e7c74-3807-4c82-8107-083695406b37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:43086","PortSpecifier":{"PortValue":43086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784060,"nanos":122191585},"http":{"id":"ea6e7c74-3807-4c82-8107-083695406b37","method":"DELETE","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/e8aa6f3b-4553-487e-a748-b7307d235bf1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea6e7c74-3807-4c82-8107-083695406b37","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784355,"groups":["Engineering","Project-Alpha"],"iat":1776784055,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:dca64c2f-9b6c-1c4d-6157-56379d7f91d3","preferred_username":"alice_lead","scope":"profile email","sid":"mtewSqFuptbrkmmKmn0clzYE","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea6e7c74-3807-4c82-8107-083695406b37","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784355,"groups":["Engineering","Project-Alpha"],"iat":1776784055,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:dca64c2f-9b6c-1c4d-6157-56379d7f91d3","preferred_username":"alice_lead","scope":"profile email","sid":"mtewSqFuptbrkmmKmn0clzYE","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/e8aa6f3b-4553-487e-a748-b7307d235bf1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea6e7c74-3807-4c82-8107-083695406b37","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea6e7c74-3807-4c82-8107-083695406b37","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea6e7c74-3807-4c82-8107-083695406b37","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea6e7c74-3807-4c82-8107-083695406b37","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea6e7c74-3807-4c82-8107-083695406b37","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:07:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea6e7c74-3807-4c82-8107-083695406b37","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:07:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea6e7c74-3807-4c82-8107-083695406b37","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c679e94-50a2-48b6-934f-bcd7d9707386","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:48762","PortSpecifier":{"PortValue":48762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c679e94-50a2-48b6-934f-bcd7d9707386","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c679e94-50a2-48b6-934f-bcd7d9707386","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:48762","PortSpecifier":{"PortValue":48762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784063,"nanos":153297913},"http":{"id":"9c679e94-50a2-48b6-934f-bcd7d9707386","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c679e94-50a2-48b6-934f-bcd7d9707386","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OnVQyodHEWVC1iDa_6E8g4xi6jPVUOpXI1seckF4fwkEPovrMFPzb6KIHkrn"} {"level":"debug","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9c679e94-50a2-48b6-934f-bcd7d9707386","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OnVQyodHEWVC1iDa_6E8g4xi6jPVUOpXI1seckF4fwkEPovrMFPzb6KIHkrn\"}"} {"level":"debug","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9c679e94-50a2-48b6-934f-bcd7d9707386","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}} {"level":"debug","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c679e94-50a2-48b6-934f-bcd7d9707386","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"9c679e94-50a2-48b6-934f-bcd7d9707386","config":{"Name":"api-key-valid","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"info","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c679e94-50a2-48b6-934f-bcd7d9707386","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"message":"Unauthorized"}} {"level":"debug","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c679e94-50a2-48b6-934f-bcd7d9707386","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"message":"Unauthorized"}} {"level":"info","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fb176fa-581f-4921-8b1e-b9156af410b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:9650","PortSpecifier":{"PortValue":9650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fb176fa-581f-4921-8b1e-b9156af410b3","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fb176fa-581f-4921-8b1e-b9156af410b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:9650","PortSpecifier":{"PortValue":9650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784063,"nanos":275953687},"http":{"id":"7fb176fa-581f-4921-8b1e-b9156af410b3","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"7fb176fa-581f-4921-8b1e-b9156af410b3","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7fb176fa-581f-4921-8b1e-b9156af410b3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"7fb176fa-581f-4921-8b1e-b9156af410b3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"not authenticated"} {"level":"info","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fb176fa-581f-4921-8b1e-b9156af410b3","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}"}} {"level":"debug","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fb176fa-581f-4921-8b1e-b9156af410b3","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}} {"level":"info","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29257e96-651a-43a3-b5e4-6abc8717e8e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:47600","PortSpecifier":{"PortValue":47600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29257e96-651a-43a3-b5e4-6abc8717e8e8","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29257e96-651a-43a3-b5e4-6abc8717e8e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:47600","PortSpecifier":{"PortValue":47600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784063,"nanos":443964598},"http":{"id":"29257e96-651a-43a3-b5e4-6abc8717e8e8","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29257e96-651a-43a3-b5e4-6abc8717e8e8","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Engineering","Project-Alpha"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:a655a839-fdbd-e069-fc4d-3d068d62e74f","preferred_username":"alice_lead","scope":"profile email","sid":"tOi-oWV91U3tbWZH8S94ss5y","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29257e96-651a-43a3-b5e4-6abc8717e8e8","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Engineering","Project-Alpha"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:a655a839-fdbd-e069-fc4d-3d068d62e74f","preferred_username":"alice_lead","scope":"profile email","sid":"tOi-oWV91U3tbWZH8S94ss5y","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29257e96-651a-43a3-b5e4-6abc8717e8e8","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29257e96-651a-43a3-b5e4-6abc8717e8e8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29257e96-651a-43a3-b5e4-6abc8717e8e8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29257e96-651a-43a3-b5e4-6abc8717e8e8","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29257e96-651a-43a3-b5e4-6abc8717e8e8","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29257e96-651a-43a3-b5e4-6abc8717e8e8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:07:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29257e96-651a-43a3-b5e4-6abc8717e8e8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:07:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25ed8949-491c-4600-af9a-47a89cde0712","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:63266","PortSpecifier":{"PortValue":63266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25ed8949-491c-4600-af9a-47a89cde0712","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25ed8949-491c-4600-af9a-47a89cde0712","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:63266","PortSpecifier":{"PortValue":63266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784068,"nanos":470654874},"http":{"id":"25ed8949-491c-4600-af9a-47a89cde0712","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25ed8949-491c-4600-af9a-47a89cde0712","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Engineering","Project-Alpha"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:a655a839-fdbd-e069-fc4d-3d068d62e74f","preferred_username":"alice_lead","scope":"profile email","sid":"tOi-oWV91U3tbWZH8S94ss5y","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:07:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25ed8949-491c-4600-af9a-47a89cde0712","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Engineering","Project-Alpha"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:a655a839-fdbd-e069-fc4d-3d068d62e74f","preferred_username":"alice_lead","scope":"profile email","sid":"tOi-oWV91U3tbWZH8S94ss5y","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25ed8949-491c-4600-af9a-47a89cde0712","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:07:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25ed8949-491c-4600-af9a-47a89cde0712","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:07:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25ed8949-491c-4600-af9a-47a89cde0712","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:07:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25ed8949-491c-4600-af9a-47a89cde0712","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:07:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25ed8949-491c-4600-af9a-47a89cde0712","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:07:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25ed8949-491c-4600-af9a-47a89cde0712","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:07:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25ed8949-491c-4600-af9a-47a89cde0712","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"735e051a-4270-4e17-8876-1d43ef456902","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:50372","PortSpecifier":{"PortValue":50372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"735e051a-4270-4e17-8876-1d43ef456902","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"735e051a-4270-4e17-8876-1d43ef456902","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:50372","PortSpecifier":{"PortValue":50372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784073,"nanos":502296569},"http":{"id":"735e051a-4270-4e17-8876-1d43ef456902","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"735e051a-4270-4e17-8876-1d43ef456902","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Engineering","Project-Alpha"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:a655a839-fdbd-e069-fc4d-3d068d62e74f","preferred_username":"alice_lead","scope":"profile email","sid":"tOi-oWV91U3tbWZH8S94ss5y","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"735e051a-4270-4e17-8876-1d43ef456902","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Engineering","Project-Alpha"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:a655a839-fdbd-e069-fc4d-3d068d62e74f","preferred_username":"alice_lead","scope":"profile email","sid":"tOi-oWV91U3tbWZH8S94ss5y","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"735e051a-4270-4e17-8876-1d43ef456902","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"735e051a-4270-4e17-8876-1d43ef456902","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"735e051a-4270-4e17-8876-1d43ef456902","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"735e051a-4270-4e17-8876-1d43ef456902","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"735e051a-4270-4e17-8876-1d43ef456902","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"735e051a-4270-4e17-8876-1d43ef456902","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"735e051a-4270-4e17-8876-1d43ef456902","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c7b27bf-e2bf-4772-9b43-b4afd9c299d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:53044","PortSpecifier":{"PortValue":53044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c7b27bf-e2bf-4772-9b43-b4afd9c299d6","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c7b27bf-e2bf-4772-9b43-b4afd9c299d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:53044","PortSpecifier":{"PortValue":53044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784078,"nanos":534726359},"http":{"id":"1c7b27bf-e2bf-4772-9b43-b4afd9c299d6","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c7b27bf-e2bf-4772-9b43-b4afd9c299d6","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Engineering","Project-Alpha"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:a655a839-fdbd-e069-fc4d-3d068d62e74f","preferred_username":"alice_lead","scope":"profile email","sid":"tOi-oWV91U3tbWZH8S94ss5y","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c7b27bf-e2bf-4772-9b43-b4afd9c299d6","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Engineering","Project-Alpha"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:a655a839-fdbd-e069-fc4d-3d068d62e74f","preferred_username":"alice_lead","scope":"profile email","sid":"tOi-oWV91U3tbWZH8S94ss5y","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c7b27bf-e2bf-4772-9b43-b4afd9c299d6","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c7b27bf-e2bf-4772-9b43-b4afd9c299d6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c7b27bf-e2bf-4772-9b43-b4afd9c299d6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c7b27bf-e2bf-4772-9b43-b4afd9c299d6","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c7b27bf-e2bf-4772-9b43-b4afd9c299d6","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c7b27bf-e2bf-4772-9b43-b4afd9c299d6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c7b27bf-e2bf-4772-9b43-b4afd9c299d6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3395d9e-576b-4743-9ab9-1ac006379699","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:33994","PortSpecifier":{"PortValue":33994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3395d9e-576b-4743-9ab9-1ac006379699","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3395d9e-576b-4743-9ab9-1ac006379699","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:33994","PortSpecifier":{"PortValue":33994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784078,"nanos":559921979},"http":{"id":"f3395d9e-576b-4743-9ab9-1ac006379699","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3395d9e-576b-4743-9ab9-1ac006379699","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Site-Reliability"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2bfdece4-1334-9172-6997-ece176c690ff","preferred_username":"bob_sre","scope":"profile email","sid":"6q8bEaP1akMgQ93wZ_qbvVUj","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3395d9e-576b-4743-9ab9-1ac006379699","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Site-Reliability"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2bfdece4-1334-9172-6997-ece176c690ff","preferred_username":"bob_sre","scope":"profile email","sid":"6q8bEaP1akMgQ93wZ_qbvVUj","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3395d9e-576b-4743-9ab9-1ac006379699","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3395d9e-576b-4743-9ab9-1ac006379699","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"} {"level":"debug","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3395d9e-576b-4743-9ab9-1ac006379699","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"} {"level":"debug","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3395d9e-576b-4743-9ab9-1ac006379699","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3395d9e-576b-4743-9ab9-1ac006379699","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3395d9e-576b-4743-9ab9-1ac006379699","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:07:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3395d9e-576b-4743-9ab9-1ac006379699","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:08:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ccba170-d30d-40b1-9700-500b933b1358","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:10682","PortSpecifier":{"PortValue":10682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ccba170-d30d-40b1-9700-500b933b1358","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:08:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ccba170-d30d-40b1-9700-500b933b1358","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:10682","PortSpecifier":{"PortValue":10682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784083,"nanos":591252732},"http":{"id":"5ccba170-d30d-40b1-9700-500b933b1358","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ccba170-d30d-40b1-9700-500b933b1358","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Site-Reliability"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2bfdece4-1334-9172-6997-ece176c690ff","preferred_username":"bob_sre","scope":"profile email","sid":"6q8bEaP1akMgQ93wZ_qbvVUj","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:08:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ccba170-d30d-40b1-9700-500b933b1358","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Site-Reliability"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2bfdece4-1334-9172-6997-ece176c690ff","preferred_username":"bob_sre","scope":"profile email","sid":"6q8bEaP1akMgQ93wZ_qbvVUj","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ccba170-d30d-40b1-9700-500b933b1358","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:08:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ccba170-d30d-40b1-9700-500b933b1358","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"} {"level":"debug","ts":"2026-04-21T15:08:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ccba170-d30d-40b1-9700-500b933b1358","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"} {"level":"debug","ts":"2026-04-21T15:08:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ccba170-d30d-40b1-9700-500b933b1358","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:08:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ccba170-d30d-40b1-9700-500b933b1358","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:08:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ccba170-d30d-40b1-9700-500b933b1358","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:08:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ccba170-d30d-40b1-9700-500b933b1358","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:08:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6b12ac6-9983-4fa2-9eac-0f5f9f2f9f61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:43058","PortSpecifier":{"PortValue":43058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6b12ac6-9983-4fa2-9eac-0f5f9f2f9f61","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:08:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6b12ac6-9983-4fa2-9eac-0f5f9f2f9f61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:43058","PortSpecifier":{"PortValue":43058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784088,"nanos":623604907},"http":{"id":"e6b12ac6-9983-4fa2-9eac-0f5f9f2f9f61","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6b12ac6-9983-4fa2-9eac-0f5f9f2f9f61","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Site-Reliability"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2bfdece4-1334-9172-6997-ece176c690ff","preferred_username":"bob_sre","scope":"profile email","sid":"6q8bEaP1akMgQ93wZ_qbvVUj","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:08:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6b12ac6-9983-4fa2-9eac-0f5f9f2f9f61","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Site-Reliability"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2bfdece4-1334-9172-6997-ece176c690ff","preferred_username":"bob_sre","scope":"profile email","sid":"6q8bEaP1akMgQ93wZ_qbvVUj","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6b12ac6-9983-4fa2-9eac-0f5f9f2f9f61","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:08:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6b12ac6-9983-4fa2-9eac-0f5f9f2f9f61","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"} {"level":"debug","ts":"2026-04-21T15:08:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6b12ac6-9983-4fa2-9eac-0f5f9f2f9f61","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"} {"level":"debug","ts":"2026-04-21T15:08:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6b12ac6-9983-4fa2-9eac-0f5f9f2f9f61","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:08:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6b12ac6-9983-4fa2-9eac-0f5f9f2f9f61","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:08:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6b12ac6-9983-4fa2-9eac-0f5f9f2f9f61","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:08:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6b12ac6-9983-4fa2-9eac-0f5f9f2f9f61","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:08:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"318bc2a0-f0ee-44a2-aa88-d9bfcdc67748","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:43332","PortSpecifier":{"PortValue":43332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"318bc2a0-f0ee-44a2-aa88-d9bfcdc67748","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:08:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"318bc2a0-f0ee-44a2-aa88-d9bfcdc67748","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:43332","PortSpecifier":{"PortValue":43332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784093,"nanos":656214579},"http":{"id":"318bc2a0-f0ee-44a2-aa88-d9bfcdc67748","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"318bc2a0-f0ee-44a2-aa88-d9bfcdc67748","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Site-Reliability"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2bfdece4-1334-9172-6997-ece176c690ff","preferred_username":"bob_sre","scope":"profile email","sid":"6q8bEaP1akMgQ93wZ_qbvVUj","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"318bc2a0-f0ee-44a2-aa88-d9bfcdc67748","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Site-Reliability"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2bfdece4-1334-9172-6997-ece176c690ff","preferred_username":"bob_sre","scope":"profile email","sid":"6q8bEaP1akMgQ93wZ_qbvVUj","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"318bc2a0-f0ee-44a2-aa88-d9bfcdc67748","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"318bc2a0-f0ee-44a2-aa88-d9bfcdc67748","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"} {"level":"debug","ts":"2026-04-21T15:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"318bc2a0-f0ee-44a2-aa88-d9bfcdc67748","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"} {"level":"debug","ts":"2026-04-21T15:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"318bc2a0-f0ee-44a2-aa88-d9bfcdc67748","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"318bc2a0-f0ee-44a2-aa88-d9bfcdc67748","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:08:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"318bc2a0-f0ee-44a2-aa88-d9bfcdc67748","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:08:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"318bc2a0-f0ee-44a2-aa88-d9bfcdc67748","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:08:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"309c4f7b-5fa7-41e3-91ff-60026fc0dd33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:44486","PortSpecifier":{"PortValue":44486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"309c4f7b-5fa7-41e3-91ff-60026fc0dd33","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:08:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"309c4f7b-5fa7-41e3-91ff-60026fc0dd33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:44486","PortSpecifier":{"PortValue":44486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784098,"nanos":684477185},"http":{"id":"309c4f7b-5fa7-41e3-91ff-60026fc0dd33","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"309c4f7b-5fa7-41e3-91ff-60026fc0dd33","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Site-Reliability"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2bfdece4-1334-9172-6997-ece176c690ff","preferred_username":"bob_sre","scope":"profile email","sid":"6q8bEaP1akMgQ93wZ_qbvVUj","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"309c4f7b-5fa7-41e3-91ff-60026fc0dd33","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Site-Reliability"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2bfdece4-1334-9172-6997-ece176c690ff","preferred_username":"bob_sre","scope":"profile email","sid":"6q8bEaP1akMgQ93wZ_qbvVUj","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"309c4f7b-5fa7-41e3-91ff-60026fc0dd33","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"309c4f7b-5fa7-41e3-91ff-60026fc0dd33","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"} {"level":"debug","ts":"2026-04-21T15:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"309c4f7b-5fa7-41e3-91ff-60026fc0dd33","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"} {"level":"debug","ts":"2026-04-21T15:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"309c4f7b-5fa7-41e3-91ff-60026fc0dd33","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"309c4f7b-5fa7-41e3-91ff-60026fc0dd33","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:08:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"309c4f7b-5fa7-41e3-91ff-60026fc0dd33","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:08:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"309c4f7b-5fa7-41e3-91ff-60026fc0dd33","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:08:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ced5e89-d229-4865-adac-4513c9f28014","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:6244","PortSpecifier":{"PortValue":6244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ced5e89-d229-4865-adac-4513c9f28014","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:08:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ced5e89-d229-4865-adac-4513c9f28014","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:6244","PortSpecifier":{"PortValue":6244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784103,"nanos":718466600},"http":{"id":"4ced5e89-d229-4865-adac-4513c9f28014","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ced5e89-d229-4865-adac-4513c9f28014","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Site-Reliability"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2bfdece4-1334-9172-6997-ece176c690ff","preferred_username":"bob_sre","scope":"profile email","sid":"6q8bEaP1akMgQ93wZ_qbvVUj","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:08:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ced5e89-d229-4865-adac-4513c9f28014","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Site-Reliability"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2bfdece4-1334-9172-6997-ece176c690ff","preferred_username":"bob_sre","scope":"profile email","sid":"6q8bEaP1akMgQ93wZ_qbvVUj","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ced5e89-d229-4865-adac-4513c9f28014","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:08:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ced5e89-d229-4865-adac-4513c9f28014","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"} {"level":"debug","ts":"2026-04-21T15:08:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ced5e89-d229-4865-adac-4513c9f28014","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"} {"level":"debug","ts":"2026-04-21T15:08:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ced5e89-d229-4865-adac-4513c9f28014","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:08:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ced5e89-d229-4865-adac-4513c9f28014","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:08:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ced5e89-d229-4865-adac-4513c9f28014","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:08:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ced5e89-d229-4865-adac-4513c9f28014","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:08:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce649150-dc35-4653-86f8-b74514b0998b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:48710","PortSpecifier":{"PortValue":48710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce649150-dc35-4653-86f8-b74514b0998b","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:08:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce649150-dc35-4653-86f8-b74514b0998b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:48710","PortSpecifier":{"PortValue":48710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784108,"nanos":748344046},"http":{"id":"ce649150-dc35-4653-86f8-b74514b0998b","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce649150-dc35-4653-86f8-b74514b0998b","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Site-Reliability"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2bfdece4-1334-9172-6997-ece176c690ff","preferred_username":"bob_sre","scope":"profile email","sid":"6q8bEaP1akMgQ93wZ_qbvVUj","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce649150-dc35-4653-86f8-b74514b0998b","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Site-Reliability"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2bfdece4-1334-9172-6997-ece176c690ff","preferred_username":"bob_sre","scope":"profile email","sid":"6q8bEaP1akMgQ93wZ_qbvVUj","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce649150-dc35-4653-86f8-b74514b0998b","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:08:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce649150-dc35-4653-86f8-b74514b0998b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"} {"level":"debug","ts":"2026-04-21T15:08:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce649150-dc35-4653-86f8-b74514b0998b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"} {"level":"debug","ts":"2026-04-21T15:08:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce649150-dc35-4653-86f8-b74514b0998b","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:08:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce649150-dc35-4653-86f8-b74514b0998b","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:08:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce649150-dc35-4653-86f8-b74514b0998b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:08:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce649150-dc35-4653-86f8-b74514b0998b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84925870-c715-42de-8a7d-3a7a9c39957a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:4958","PortSpecifier":{"PortValue":4958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84925870-c715-42de-8a7d-3a7a9c39957a","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84925870-c715-42de-8a7d-3a7a9c39957a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:4958","PortSpecifier":{"PortValue":4958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784113,"nanos":797185378},"http":{"id":"84925870-c715-42de-8a7d-3a7a9c39957a","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84925870-c715-42de-8a7d-3a7a9c39957a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Site-Reliability"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2bfdece4-1334-9172-6997-ece176c690ff","preferred_username":"bob_sre","scope":"profile email","sid":"6q8bEaP1akMgQ93wZ_qbvVUj","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84925870-c715-42de-8a7d-3a7a9c39957a","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784363,"groups":["Site-Reliability"],"iat":1776784063,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2bfdece4-1334-9172-6997-ece176c690ff","preferred_username":"bob_sre","scope":"profile email","sid":"6q8bEaP1akMgQ93wZ_qbvVUj","sub":"c878ed2b-7cdc-4b45-b4f3-288865c0b1af","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84925870-c715-42de-8a7d-3a7a9c39957a","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84925870-c715-42de-8a7d-3a7a9c39957a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"} {"level":"debug","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84925870-c715-42de-8a7d-3a7a9c39957a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"} {"level":"debug","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84925870-c715-42de-8a7d-3a7a9c39957a","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84925870-c715-42de-8a7d-3a7a9c39957a","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84925870-c715-42de-8a7d-3a7a9c39957a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84925870-c715-42de-8a7d-3a7a9c39957a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72ddd095-e447-46f1-b99b-01d1a33047bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:52082","PortSpecifier":{"PortValue":52082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72ddd095-e447-46f1-b99b-01d1a33047bf","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72ddd095-e447-46f1-b99b-01d1a33047bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:52082","PortSpecifier":{"PortValue":52082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784113,"nanos":892560650},"http":{"id":"72ddd095-e447-46f1-b99b-01d1a33047bf","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72ddd095-e447-46f1-b99b-01d1a33047bf","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72ddd095-e447-46f1-b99b-01d1a33047bf","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72ddd095-e447-46f1-b99b-01d1a33047bf","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72ddd095-e447-46f1-b99b-01d1a33047bf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72ddd095-e447-46f1-b99b-01d1a33047bf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72ddd095-e447-46f1-b99b-01d1a33047bf","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72ddd095-e447-46f1-b99b-01d1a33047bf","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72ddd095-e447-46f1-b99b-01d1a33047bf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:08:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72ddd095-e447-46f1-b99b-01d1a33047bf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:08:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"541a4717-16b8-4ce0-b6d2-c8602b91400c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:27588","PortSpecifier":{"PortValue":27588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"541a4717-16b8-4ce0-b6d2-c8602b91400c","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:08:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"541a4717-16b8-4ce0-b6d2-c8602b91400c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:27588","PortSpecifier":{"PortValue":27588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784118,"nanos":925213202},"http":{"id":"541a4717-16b8-4ce0-b6d2-c8602b91400c","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"541a4717-16b8-4ce0-b6d2-c8602b91400c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:08:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"541a4717-16b8-4ce0-b6d2-c8602b91400c","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"541a4717-16b8-4ce0-b6d2-c8602b91400c","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:08:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"541a4717-16b8-4ce0-b6d2-c8602b91400c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:08:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"541a4717-16b8-4ce0-b6d2-c8602b91400c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:08:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"541a4717-16b8-4ce0-b6d2-c8602b91400c","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:08:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"541a4717-16b8-4ce0-b6d2-c8602b91400c","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:08:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"541a4717-16b8-4ce0-b6d2-c8602b91400c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:08:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"541a4717-16b8-4ce0-b6d2-c8602b91400c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:08:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6d42f66-d2a8-4edf-a6c0-7af141f7b006","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:7808","PortSpecifier":{"PortValue":7808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6d42f66-d2a8-4edf-a6c0-7af141f7b006","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:08:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6d42f66-d2a8-4edf-a6c0-7af141f7b006","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:7808","PortSpecifier":{"PortValue":7808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784123,"nanos":959389413},"http":{"id":"e6d42f66-d2a8-4edf-a6c0-7af141f7b006","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6d42f66-d2a8-4edf-a6c0-7af141f7b006","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:08:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6d42f66-d2a8-4edf-a6c0-7af141f7b006","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6d42f66-d2a8-4edf-a6c0-7af141f7b006","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:08:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6d42f66-d2a8-4edf-a6c0-7af141f7b006","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:08:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6d42f66-d2a8-4edf-a6c0-7af141f7b006","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:08:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6d42f66-d2a8-4edf-a6c0-7af141f7b006","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:08:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6d42f66-d2a8-4edf-a6c0-7af141f7b006","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:08:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6d42f66-d2a8-4edf-a6c0-7af141f7b006","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:08:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6d42f66-d2a8-4edf-a6c0-7af141f7b006","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:08:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"958263b9-e06d-4d69-abac-f7880030056e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53184","PortSpecifier":{"PortValue":53184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"958263b9-e06d-4d69-abac-f7880030056e","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:08:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"958263b9-e06d-4d69-abac-f7880030056e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53184","PortSpecifier":{"PortValue":53184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784128,"nanos":992615843},"http":{"id":"958263b9-e06d-4d69-abac-f7880030056e","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"958263b9-e06d-4d69-abac-f7880030056e","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:08:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"958263b9-e06d-4d69-abac-f7880030056e","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"958263b9-e06d-4d69-abac-f7880030056e","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:08:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"958263b9-e06d-4d69-abac-f7880030056e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:08:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"958263b9-e06d-4d69-abac-f7880030056e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:08:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"958263b9-e06d-4d69-abac-f7880030056e","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:08:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"958263b9-e06d-4d69-abac-f7880030056e","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:08:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"958263b9-e06d-4d69-abac-f7880030056e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:08:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"958263b9-e06d-4d69-abac-f7880030056e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:08:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40b3e0ee-c382-49b5-9135-500e637fc372","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:39480","PortSpecifier":{"PortValue":39480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40b3e0ee-c382-49b5-9135-500e637fc372","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:08:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40b3e0ee-c382-49b5-9135-500e637fc372","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:39480","PortSpecifier":{"PortValue":39480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784134,"nanos":25899174},"http":{"id":"40b3e0ee-c382-49b5-9135-500e637fc372","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40b3e0ee-c382-49b5-9135-500e637fc372","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:08:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40b3e0ee-c382-49b5-9135-500e637fc372","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40b3e0ee-c382-49b5-9135-500e637fc372","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:08:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40b3e0ee-c382-49b5-9135-500e637fc372","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:08:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40b3e0ee-c382-49b5-9135-500e637fc372","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:08:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40b3e0ee-c382-49b5-9135-500e637fc372","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:08:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40b3e0ee-c382-49b5-9135-500e637fc372","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:08:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40b3e0ee-c382-49b5-9135-500e637fc372","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:08:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40b3e0ee-c382-49b5-9135-500e637fc372","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f20013f-9d07-45fb-98b2-8ab2e91669e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:7918","PortSpecifier":{"PortValue":7918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f20013f-9d07-45fb-98b2-8ab2e91669e5","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:08:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f20013f-9d07-45fb-98b2-8ab2e91669e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:7918","PortSpecifier":{"PortValue":7918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784139,"nanos":57762756},"http":{"id":"9f20013f-9d07-45fb-98b2-8ab2e91669e5","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f20013f-9d07-45fb-98b2-8ab2e91669e5","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:08:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f20013f-9d07-45fb-98b2-8ab2e91669e5","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:08:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f20013f-9d07-45fb-98b2-8ab2e91669e5","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:08:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f20013f-9d07-45fb-98b2-8ab2e91669e5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:08:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f20013f-9d07-45fb-98b2-8ab2e91669e5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:08:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f20013f-9d07-45fb-98b2-8ab2e91669e5","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:08:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f20013f-9d07-45fb-98b2-8ab2e91669e5","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:08:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f20013f-9d07-45fb-98b2-8ab2e91669e5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:08:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f20013f-9d07-45fb-98b2-8ab2e91669e5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:09:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aba6c85c-2785-4e64-a6ac-7d1c15fbf9d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:12718","PortSpecifier":{"PortValue":12718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aba6c85c-2785-4e64-a6ac-7d1c15fbf9d1","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:09:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aba6c85c-2785-4e64-a6ac-7d1c15fbf9d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:12718","PortSpecifier":{"PortValue":12718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784144,"nanos":88655868},"http":{"id":"aba6c85c-2785-4e64-a6ac-7d1c15fbf9d1","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aba6c85c-2785-4e64-a6ac-7d1c15fbf9d1","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:09:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aba6c85c-2785-4e64-a6ac-7d1c15fbf9d1","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aba6c85c-2785-4e64-a6ac-7d1c15fbf9d1","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:09:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aba6c85c-2785-4e64-a6ac-7d1c15fbf9d1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:09:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aba6c85c-2785-4e64-a6ac-7d1c15fbf9d1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:09:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aba6c85c-2785-4e64-a6ac-7d1c15fbf9d1","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:09:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aba6c85c-2785-4e64-a6ac-7d1c15fbf9d1","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:09:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aba6c85c-2785-4e64-a6ac-7d1c15fbf9d1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:09:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aba6c85c-2785-4e64-a6ac-7d1c15fbf9d1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:09:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a11ede91-3188-413d-bb74-388d08e5c00f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15238","PortSpecifier":{"PortValue":15238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a11ede91-3188-413d-bb74-388d08e5c00f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:09:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a11ede91-3188-413d-bb74-388d08e5c00f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15238","PortSpecifier":{"PortValue":15238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784149,"nanos":119781286},"http":{"id":"a11ede91-3188-413d-bb74-388d08e5c00f","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a11ede91-3188-413d-bb74-388d08e5c00f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:09:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a11ede91-3188-413d-bb74-388d08e5c00f","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a11ede91-3188-413d-bb74-388d08e5c00f","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:09:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a11ede91-3188-413d-bb74-388d08e5c00f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:09:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a11ede91-3188-413d-bb74-388d08e5c00f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:09:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a11ede91-3188-413d-bb74-388d08e5c00f","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:09:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a11ede91-3188-413d-bb74-388d08e5c00f","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:09:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a11ede91-3188-413d-bb74-388d08e5c00f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:09:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a11ede91-3188-413d-bb74-388d08e5c00f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:09:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48e820ae-ae8c-4b06-aab8-c3ec301548d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:64392","PortSpecifier":{"PortValue":64392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48e820ae-ae8c-4b06-aab8-c3ec301548d2","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:09:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48e820ae-ae8c-4b06-aab8-c3ec301548d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:64392","PortSpecifier":{"PortValue":64392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784154,"nanos":150951549},"http":{"id":"48e820ae-ae8c-4b06-aab8-c3ec301548d2","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48e820ae-ae8c-4b06-aab8-c3ec301548d2","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:09:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48e820ae-ae8c-4b06-aab8-c3ec301548d2","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48e820ae-ae8c-4b06-aab8-c3ec301548d2","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:09:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48e820ae-ae8c-4b06-aab8-c3ec301548d2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:09:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48e820ae-ae8c-4b06-aab8-c3ec301548d2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:09:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48e820ae-ae8c-4b06-aab8-c3ec301548d2","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:09:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48e820ae-ae8c-4b06-aab8-c3ec301548d2","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:09:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48e820ae-ae8c-4b06-aab8-c3ec301548d2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:09:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48e820ae-ae8c-4b06-aab8-c3ec301548d2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7755827-d913-46fd-a7c5-de6acc83f64c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14666","PortSpecifier":{"PortValue":14666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7755827-d913-46fd-a7c5-de6acc83f64c","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7755827-d913-46fd-a7c5-de6acc83f64c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14666","PortSpecifier":{"PortValue":14666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784159,"nanos":180453723},"http":{"id":"a7755827-d913-46fd-a7c5-de6acc83f64c","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7755827-d913-46fd-a7c5-de6acc83f64c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7755827-d913-46fd-a7c5-de6acc83f64c","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7755827-d913-46fd-a7c5-de6acc83f64c","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7755827-d913-46fd-a7c5-de6acc83f64c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7755827-d913-46fd-a7c5-de6acc83f64c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7755827-d913-46fd-a7c5-de6acc83f64c","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7755827-d913-46fd-a7c5-de6acc83f64c","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7755827-d913-46fd-a7c5-de6acc83f64c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7755827-d913-46fd-a7c5-de6acc83f64c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3520f0ad-405d-40b2-97de-7a52c82664dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42730","PortSpecifier":{"PortValue":42730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3520f0ad-405d-40b2-97de-7a52c82664dd","method":"DELETE","path":"/maas-api/v1/api-keys/beebcbf8-33ff-4589-a1ac-0be1343daf7b","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3520f0ad-405d-40b2-97de-7a52c82664dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42730","PortSpecifier":{"PortValue":42730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784159,"nanos":210982439},"http":{"id":"3520f0ad-405d-40b2-97de-7a52c82664dd","method":"DELETE","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/beebcbf8-33ff-4589-a1ac-0be1343daf7b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3520f0ad-405d-40b2-97de-7a52c82664dd","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3520f0ad-405d-40b2-97de-7a52c82664dd","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/beebcbf8-33ff-4589-a1ac-0be1343daf7b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3520f0ad-405d-40b2-97de-7a52c82664dd","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3520f0ad-405d-40b2-97de-7a52c82664dd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3520f0ad-405d-40b2-97de-7a52c82664dd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3520f0ad-405d-40b2-97de-7a52c82664dd","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3520f0ad-405d-40b2-97de-7a52c82664dd","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3520f0ad-405d-40b2-97de-7a52c82664dd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3520f0ad-405d-40b2-97de-7a52c82664dd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:09:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce0ccde3-7964-4a7d-898c-3fc34c0bc241","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32484","PortSpecifier":{"PortValue":32484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce0ccde3-7964-4a7d-898c-3fc34c0bc241","method":"DELETE","path":"/maas-api/v1/api-keys/beebcbf8-33ff-4589-a1ac-0be1343daf7b","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:09:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce0ccde3-7964-4a7d-898c-3fc34c0bc241","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32484","PortSpecifier":{"PortValue":32484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784164,"nanos":242251855},"http":{"id":"ce0ccde3-7964-4a7d-898c-3fc34c0bc241","method":"DELETE","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/beebcbf8-33ff-4589-a1ac-0be1343daf7b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce0ccde3-7964-4a7d-898c-3fc34c0bc241","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:09:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce0ccde3-7964-4a7d-898c-3fc34c0bc241","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/beebcbf8-33ff-4589-a1ac-0be1343daf7b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce0ccde3-7964-4a7d-898c-3fc34c0bc241","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:09:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce0ccde3-7964-4a7d-898c-3fc34c0bc241","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:09:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce0ccde3-7964-4a7d-898c-3fc34c0bc241","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:09:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce0ccde3-7964-4a7d-898c-3fc34c0bc241","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:09:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce0ccde3-7964-4a7d-898c-3fc34c0bc241","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:09:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce0ccde3-7964-4a7d-898c-3fc34c0bc241","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:09:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce0ccde3-7964-4a7d-898c-3fc34c0bc241","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:09:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e89c1ba0-fb6f-4c3a-82d3-92e565fbdc89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:54852","PortSpecifier":{"PortValue":54852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e89c1ba0-fb6f-4c3a-82d3-92e565fbdc89","method":"DELETE","path":"/maas-api/v1/api-keys/beebcbf8-33ff-4589-a1ac-0be1343daf7b","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:09:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e89c1ba0-fb6f-4c3a-82d3-92e565fbdc89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:54852","PortSpecifier":{"PortValue":54852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784169,"nanos":280598593},"http":{"id":"e89c1ba0-fb6f-4c3a-82d3-92e565fbdc89","method":"DELETE","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/beebcbf8-33ff-4589-a1ac-0be1343daf7b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e89c1ba0-fb6f-4c3a-82d3-92e565fbdc89","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:09:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e89c1ba0-fb6f-4c3a-82d3-92e565fbdc89","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/beebcbf8-33ff-4589-a1ac-0be1343daf7b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e89c1ba0-fb6f-4c3a-82d3-92e565fbdc89","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:09:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e89c1ba0-fb6f-4c3a-82d3-92e565fbdc89","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:09:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e89c1ba0-fb6f-4c3a-82d3-92e565fbdc89","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:09:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e89c1ba0-fb6f-4c3a-82d3-92e565fbdc89","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:09:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e89c1ba0-fb6f-4c3a-82d3-92e565fbdc89","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:09:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e89c1ba0-fb6f-4c3a-82d3-92e565fbdc89","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:09:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e89c1ba0-fb6f-4c3a-82d3-92e565fbdc89","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:09:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d277a94-4646-4999-9ff2-e530e97b9695","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:11728","PortSpecifier":{"PortValue":11728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9d277a94-4646-4999-9ff2-e530e97b9695","method":"DELETE","path":"/maas-api/v1/api-keys/beebcbf8-33ff-4589-a1ac-0be1343daf7b","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:09:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d277a94-4646-4999-9ff2-e530e97b9695","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:11728","PortSpecifier":{"PortValue":11728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784174,"nanos":311388650},"http":{"id":"9d277a94-4646-4999-9ff2-e530e97b9695","method":"DELETE","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/beebcbf8-33ff-4589-a1ac-0be1343daf7b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9d277a94-4646-4999-9ff2-e530e97b9695","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:09:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9d277a94-4646-4999-9ff2-e530e97b9695","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/beebcbf8-33ff-4589-a1ac-0be1343daf7b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d277a94-4646-4999-9ff2-e530e97b9695","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:09:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d277a94-4646-4999-9ff2-e530e97b9695","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:09:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d277a94-4646-4999-9ff2-e530e97b9695","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:09:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d277a94-4646-4999-9ff2-e530e97b9695","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:09:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d277a94-4646-4999-9ff2-e530e97b9695","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:09:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d277a94-4646-4999-9ff2-e530e97b9695","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:09:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d277a94-4646-4999-9ff2-e530e97b9695","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:09:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2dc0be4-d622-4c27-a350-89896335fe8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:18028","PortSpecifier":{"PortValue":18028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e2dc0be4-d622-4c27-a350-89896335fe8b","method":"DELETE","path":"/maas-api/v1/api-keys/beebcbf8-33ff-4589-a1ac-0be1343daf7b","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:09:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2dc0be4-d622-4c27-a350-89896335fe8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:18028","PortSpecifier":{"PortValue":18028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784179,"nanos":345623264},"http":{"id":"e2dc0be4-d622-4c27-a350-89896335fe8b","method":"DELETE","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/beebcbf8-33ff-4589-a1ac-0be1343daf7b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e2dc0be4-d622-4c27-a350-89896335fe8b","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:09:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e2dc0be4-d622-4c27-a350-89896335fe8b","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/beebcbf8-33ff-4589-a1ac-0be1343daf7b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2dc0be4-d622-4c27-a350-89896335fe8b","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:09:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2dc0be4-d622-4c27-a350-89896335fe8b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:09:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2dc0be4-d622-4c27-a350-89896335fe8b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:09:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2dc0be4-d622-4c27-a350-89896335fe8b","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:09:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2dc0be4-d622-4c27-a350-89896335fe8b","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:09:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2dc0be4-d622-4c27-a350-89896335fe8b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:09:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2dc0be4-d622-4c27-a350-89896335fe8b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c91d07d-0069-4b63-b903-169ef193b077","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:44610","PortSpecifier":{"PortValue":44610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c91d07d-0069-4b63-b903-169ef193b077","method":"DELETE","path":"/maas-api/v1/api-keys/beebcbf8-33ff-4589-a1ac-0be1343daf7b","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c91d07d-0069-4b63-b903-169ef193b077","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:44610","PortSpecifier":{"PortValue":44610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784184,"nanos":378856126},"http":{"id":"3c91d07d-0069-4b63-b903-169ef193b077","method":"DELETE","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/beebcbf8-33ff-4589-a1ac-0be1343daf7b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c91d07d-0069-4b63-b903-169ef193b077","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c91d07d-0069-4b63-b903-169ef193b077","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784413,"groups":["Engineering","Project-Alpha"],"iat":1776784113,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2ad54b1a-b69e-a985-7dd2-95b8e4d2dab7","preferred_username":"alice_lead","scope":"profile email","sid":"d1nkmOCiD6EBaWT5jQ7zK1da","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/beebcbf8-33ff-4589-a1ac-0be1343daf7b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c91d07d-0069-4b63-b903-169ef193b077","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c91d07d-0069-4b63-b903-169ef193b077","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c91d07d-0069-4b63-b903-169ef193b077","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c91d07d-0069-4b63-b903-169ef193b077","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c91d07d-0069-4b63-b903-169ef193b077","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c91d07d-0069-4b63-b903-169ef193b077","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c91d07d-0069-4b63-b903-169ef193b077","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ced98827-7c44-4cf7-8cc8-aef9419a2ae1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23020","PortSpecifier":{"PortValue":23020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ced98827-7c44-4cf7-8cc8-aef9419a2ae1","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ced98827-7c44-4cf7-8cc8-aef9419a2ae1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23020","PortSpecifier":{"PortValue":23020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784184,"nanos":550541056},"http":{"id":"ced98827-7c44-4cf7-8cc8-aef9419a2ae1","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ced98827-7c44-4cf7-8cc8-aef9419a2ae1","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784484,"groups":["Engineering","Project-Alpha"],"iat":1776784184,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:5aac9427-0977-d0b8-7db4-80fb8078f699","preferred_username":"alice_lead","scope":"profile email","sid":"GaEwOkz5UthwD3SMU18SXvd9","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ced98827-7c44-4cf7-8cc8-aef9419a2ae1","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784484,"groups":["Engineering","Project-Alpha"],"iat":1776784184,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:5aac9427-0977-d0b8-7db4-80fb8078f699","preferred_username":"alice_lead","scope":"profile email","sid":"GaEwOkz5UthwD3SMU18SXvd9","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ced98827-7c44-4cf7-8cc8-aef9419a2ae1","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ced98827-7c44-4cf7-8cc8-aef9419a2ae1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ced98827-7c44-4cf7-8cc8-aef9419a2ae1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ced98827-7c44-4cf7-8cc8-aef9419a2ae1","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ced98827-7c44-4cf7-8cc8-aef9419a2ae1","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ced98827-7c44-4cf7-8cc8-aef9419a2ae1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ced98827-7c44-4cf7-8cc8-aef9419a2ae1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df813cf6-6d18-460c-8c6a-1af18247f61d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:64842","PortSpecifier":{"PortValue":64842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df813cf6-6d18-460c-8c6a-1af18247f61d","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df813cf6-6d18-460c-8c6a-1af18247f61d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:64842","PortSpecifier":{"PortValue":64842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784184,"nanos":579055221},"http":{"id":"df813cf6-6d18-460c-8c6a-1af18247f61d","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df813cf6-6d18-460c-8c6a-1af18247f61d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HP08RM48PJS1A8Ii_bjJi5PbHxJu5aw75ydtL36dqRVGnLqSuY3AF7FSUE6l"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df813cf6-6d18-460c-8c6a-1af18247f61d","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HP08RM48PJS1A8Ii_bjJi5PbHxJu5aw75ydtL36dqRVGnLqSuY3AF7FSUE6l\"}"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df813cf6-6d18-460c-8c6a-1af18247f61d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df813cf6-6d18-460c-8c6a-1af18247f61d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df813cf6-6d18-460c-8c6a-1af18247f61d","config":{"Name":"api-key-valid","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df813cf6-6d18-460c-8c6a-1af18247f61d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df813cf6-6d18-460c-8c6a-1af18247f61d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":""} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df813cf6-6d18-460c-8c6a-1af18247f61d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"info","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df813cf6-6d18-460c-8c6a-1af18247f61d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df813cf6-6d18-460c-8c6a-1af18247f61d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d344f52-60cd-41f4-acec-6d108ca43849","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:4048","PortSpecifier":{"PortValue":4048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d344f52-60cd-41f4-acec-6d108ca43849","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d344f52-60cd-41f4-acec-6d108ca43849","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:4048","PortSpecifier":{"PortValue":4048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784184,"nanos":604936578},"http":{"id":"1d344f52-60cd-41f4-acec-6d108ca43849","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d344f52-60cd-41f4-acec-6d108ca43849","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HP08RM48PJS1A8Ii_bjJi5PbHxJu5aw75ydtL36dqRVGnLqSuY3AF7FSUE6l"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1d344f52-60cd-41f4-acec-6d108ca43849","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HP08RM48PJS1A8Ii_bjJi5PbHxJu5aw75ydtL36dqRVGnLqSuY3AF7FSUE6l\"}"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1d344f52-60cd-41f4-acec-6d108ca43849","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1d344f52-60cd-41f4-acec-6d108ca43849","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"\\u003cnil\\u003e\"}"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1d344f52-60cd-41f4-acec-6d108ca43849","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d344f52-60cd-41f4-acec-6d108ca43849","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-HP08RM48PJS1A8Ii_bjJi5PbHxJu5aw75ydtL36dqRVGnLqSuY3AF7FSUE6l","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.36~maas-default-gateway-openshift-default-58b6f876-vbvzt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"1d344f52-60cd-41f4-acec-6d108ca43849"},"host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","id":"1d344f52-60cd-41f4-acec-6d108ca43849","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":604936578,"seconds":1776784184},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"100.64.0.2:4048","port":4048}}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d344f52-60cd-41f4-acec-6d108ca43849","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d344f52-60cd-41f4-acec-6d108ca43849","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d344f52-60cd-41f4-acec-6d108ca43849","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d344f52-60cd-41f4-acec-6d108ca43849","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d344f52-60cd-41f4-acec-6d108ca43849","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d344f52-60cd-41f4-acec-6d108ca43849","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"df9cd32e-9047-4476-af6c-d0c3719fbf19","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":""}} {"level":"info","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d344f52-60cd-41f4-acec-6d108ca43849","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d344f52-60cd-41f4-acec-6d108ca43849","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77c27098-c3eb-4d29-824b-a57a9389fd6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:44616","PortSpecifier":{"PortValue":44616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77c27098-c3eb-4d29-824b-a57a9389fd6f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77c27098-c3eb-4d29-824b-a57a9389fd6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:44616","PortSpecifier":{"PortValue":44616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784184,"nanos":698488018},"http":{"id":"77c27098-c3eb-4d29-824b-a57a9389fd6f","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77c27098-c3eb-4d29-824b-a57a9389fd6f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784484,"groups":["Engineering","Project-Alpha"],"iat":1776784184,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:790897e3-765c-244d-30c6-563b2ce009e7","preferred_username":"alice_lead","scope":"profile email","sid":"69Co_WOKsxTCk_qGWRclOHs0","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77c27098-c3eb-4d29-824b-a57a9389fd6f","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784484,"groups":["Engineering","Project-Alpha"],"iat":1776784184,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:790897e3-765c-244d-30c6-563b2ce009e7","preferred_username":"alice_lead","scope":"profile email","sid":"69Co_WOKsxTCk_qGWRclOHs0","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77c27098-c3eb-4d29-824b-a57a9389fd6f","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77c27098-c3eb-4d29-824b-a57a9389fd6f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77c27098-c3eb-4d29-824b-a57a9389fd6f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77c27098-c3eb-4d29-824b-a57a9389fd6f","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77c27098-c3eb-4d29-824b-a57a9389fd6f","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77c27098-c3eb-4d29-824b-a57a9389fd6f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77c27098-c3eb-4d29-824b-a57a9389fd6f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50e55b20-d642-4f51-b643-1eb2a1958236","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23032","PortSpecifier":{"PortValue":23032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50e55b20-d642-4f51-b643-1eb2a1958236","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50e55b20-d642-4f51-b643-1eb2a1958236","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:23032","PortSpecifier":{"PortValue":23032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784184,"nanos":724756002},"http":{"id":"50e55b20-d642-4f51-b643-1eb2a1958236","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50e55b20-d642-4f51-b643-1eb2a1958236","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OHpvPJiaDmmgvffv_uhGfYCzQXQWvv4iDMr8PuVDDPxtW12PnUIQnaQK7HgZ"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50e55b20-d642-4f51-b643-1eb2a1958236","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OHpvPJiaDmmgvffv_uhGfYCzQXQWvv4iDMr8PuVDDPxtW12PnUIQnaQK7HgZ\"}"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50e55b20-d642-4f51-b643-1eb2a1958236","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50e55b20-d642-4f51-b643-1eb2a1958236","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50e55b20-d642-4f51-b643-1eb2a1958236","config":{"Name":"api-key-valid","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50e55b20-d642-4f51-b643-1eb2a1958236","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50e55b20-d642-4f51-b643-1eb2a1958236","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50e55b20-d642-4f51-b643-1eb2a1958236","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"info","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50e55b20-d642-4f51-b643-1eb2a1958236","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50e55b20-d642-4f51-b643-1eb2a1958236","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1a5950d-a7dc-48db-a6a4-34b7d24c064e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29202","PortSpecifier":{"PortValue":29202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1a5950d-a7dc-48db-a6a4-34b7d24c064e","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1a5950d-a7dc-48db-a6a4-34b7d24c064e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29202","PortSpecifier":{"PortValue":29202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784184,"nanos":744076759},"http":{"id":"e1a5950d-a7dc-48db-a6a4-34b7d24c064e","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1a5950d-a7dc-48db-a6a4-34b7d24c064e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OHpvPJiaDmmgvffv_uhGfYCzQXQWvv4iDMr8PuVDDPxtW12PnUIQnaQK7HgZ"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1a5950d-a7dc-48db-a6a4-34b7d24c064e","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OHpvPJiaDmmgvffv_uhGfYCzQXQWvv4iDMr8PuVDDPxtW12PnUIQnaQK7HgZ\"}"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1a5950d-a7dc-48db-a6a4-34b7d24c064e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1a5950d-a7dc-48db-a6a4-34b7d24c064e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1a5950d-a7dc-48db-a6a4-34b7d24c064e","config":{"Name":"api-key-valid","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1a5950d-a7dc-48db-a6a4-34b7d24c064e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1a5950d-a7dc-48db-a6a4-34b7d24c064e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1a5950d-a7dc-48db-a6a4-34b7d24c064e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"info","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1a5950d-a7dc-48db-a6a4-34b7d24c064e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1a5950d-a7dc-48db-a6a4-34b7d24c064e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec3b0e7d-847a-4a10-94a7-07c5c3a2fdd9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:4048","PortSpecifier":{"PortValue":4048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec3b0e7d-847a-4a10-94a7-07c5c3a2fdd9","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec3b0e7d-847a-4a10-94a7-07c5c3a2fdd9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:4048","PortSpecifier":{"PortValue":4048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784184,"nanos":750331363},"http":{"id":"ec3b0e7d-847a-4a10-94a7-07c5c3a2fdd9","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec3b0e7d-847a-4a10-94a7-07c5c3a2fdd9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OHpvPJiaDmmgvffv_uhGfYCzQXQWvv4iDMr8PuVDDPxtW12PnUIQnaQK7HgZ"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ec3b0e7d-847a-4a10-94a7-07c5c3a2fdd9","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OHpvPJiaDmmgvffv_uhGfYCzQXQWvv4iDMr8PuVDDPxtW12PnUIQnaQK7HgZ\"}"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ec3b0e7d-847a-4a10-94a7-07c5c3a2fdd9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ec3b0e7d-847a-4a10-94a7-07c5c3a2fdd9","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ec3b0e7d-847a-4a10-94a7-07c5c3a2fdd9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec3b0e7d-847a-4a10-94a7-07c5c3a2fdd9","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-1OHpvPJiaDmmgvffv_uhGfYCzQXQWvv4iDMr8PuVDDPxtW12PnUIQnaQK7HgZ","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKPwoETkFNRRI3GjVtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC01OGI2Zjg3Ni12YnZ6dAogCglOQU1FU1BBQ0USExoRb3BlbnNoaWZ0LWluZ3Jlc3MKdAoFT1dORVISaxppa3ViZXJuZXRlczovL2FwaXMvYXBwcy92MS9uYW1lc3BhY2VzL29wZW5zaGlmdC1pbmdyZXNzL2RlcGxveW1lbnRzL21hYXMtZGVmYXVsdC1nYXRld2F5LW9wZW5zaGlmdC1kZWZhdWx0CjkKDVdPUktMT0FEX05BTUUSKBombWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.36~maas-default-gateway-openshift-default-58b6f876-vbvzt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"ec3b0e7d-847a-4a10-94a7-07c5c3a2fdd9"},"host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","id":"ec3b0e7d-847a-4a10-94a7-07c5c3a2fdd9","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":750331363,"seconds":1776784184},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"100.64.0.2:4048","port":4048}}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec3b0e7d-847a-4a10-94a7-07c5c3a2fdd9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec3b0e7d-847a-4a10-94a7-07c5c3a2fdd9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec3b0e7d-847a-4a10-94a7-07c5c3a2fdd9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec3b0e7d-847a-4a10-94a7-07c5c3a2fdd9","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec3b0e7d-847a-4a10-94a7-07c5c3a2fdd9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec3b0e7d-847a-4a10-94a7-07c5c3a2fdd9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"bf54de84-ff7d-4bc0-a59c-25094610270d","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}} {"level":"info","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec3b0e7d-847a-4a10-94a7-07c5c3a2fdd9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec3b0e7d-847a-4a10-94a7-07c5c3a2fdd9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f4f809d-63a0-4226-b2f3-98bf726251cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:18034","PortSpecifier":{"PortValue":18034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f4f809d-63a0-4226-b2f3-98bf726251cc","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f4f809d-63a0-4226-b2f3-98bf726251cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:18034","PortSpecifier":{"PortValue":18034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784184,"nanos":843191063},"http":{"id":"1f4f809d-63a0-4226-b2f3-98bf726251cc","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f4f809d-63a0-4226-b2f3-98bf726251cc","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784484,"groups":["Engineering","Project-Alpha"],"iat":1776784184,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:cd9fc685-158c-5f3a-b51a-3aef98cbd237","preferred_username":"alice_lead","scope":"profile email","sid":"Jt_LJgijXDnv3POdi6pTX0Bx","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f4f809d-63a0-4226-b2f3-98bf726251cc","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784484,"groups":["Engineering","Project-Alpha"],"iat":1776784184,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:cd9fc685-158c-5f3a-b51a-3aef98cbd237","preferred_username":"alice_lead","scope":"profile email","sid":"Jt_LJgijXDnv3POdi6pTX0Bx","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f4f809d-63a0-4226-b2f3-98bf726251cc","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f4f809d-63a0-4226-b2f3-98bf726251cc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f4f809d-63a0-4226-b2f3-98bf726251cc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f4f809d-63a0-4226-b2f3-98bf726251cc","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f4f809d-63a0-4226-b2f3-98bf726251cc","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f4f809d-63a0-4226-b2f3-98bf726251cc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:09:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f4f809d-63a0-4226-b2f3-98bf726251cc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:09:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6973b1b-dc38-4b4c-b3a8-16ad20577ad8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:64844","PortSpecifier":{"PortValue":64844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6973b1b-dc38-4b4c-b3a8-16ad20577ad8","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:09:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6973b1b-dc38-4b4c-b3a8-16ad20577ad8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:64844","PortSpecifier":{"PortValue":64844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784189,"nanos":869350644},"http":{"id":"d6973b1b-dc38-4b4c-b3a8-16ad20577ad8","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6973b1b-dc38-4b4c-b3a8-16ad20577ad8","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784484,"groups":["Engineering","Project-Alpha"],"iat":1776784184,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:cd9fc685-158c-5f3a-b51a-3aef98cbd237","preferred_username":"alice_lead","scope":"profile email","sid":"Jt_LJgijXDnv3POdi6pTX0Bx","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:09:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6973b1b-dc38-4b4c-b3a8-16ad20577ad8","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784484,"groups":["Engineering","Project-Alpha"],"iat":1776784184,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:cd9fc685-158c-5f3a-b51a-3aef98cbd237","preferred_username":"alice_lead","scope":"profile email","sid":"Jt_LJgijXDnv3POdi6pTX0Bx","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6973b1b-dc38-4b4c-b3a8-16ad20577ad8","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:09:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6973b1b-dc38-4b4c-b3a8-16ad20577ad8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:09:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6973b1b-dc38-4b4c-b3a8-16ad20577ad8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:09:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6973b1b-dc38-4b4c-b3a8-16ad20577ad8","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:09:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6973b1b-dc38-4b4c-b3a8-16ad20577ad8","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:09:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6973b1b-dc38-4b4c-b3a8-16ad20577ad8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:09:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6973b1b-dc38-4b4c-b3a8-16ad20577ad8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:09:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b589202b-53e3-448f-a5ed-76c3782eaeb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:20800","PortSpecifier":{"PortValue":20800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b589202b-53e3-448f-a5ed-76c3782eaeb2","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:09:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b589202b-53e3-448f-a5ed-76c3782eaeb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:20800","PortSpecifier":{"PortValue":20800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784194,"nanos":909909326},"http":{"id":"b589202b-53e3-448f-a5ed-76c3782eaeb2","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b589202b-53e3-448f-a5ed-76c3782eaeb2","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784484,"groups":["Engineering","Project-Alpha"],"iat":1776784184,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:cd9fc685-158c-5f3a-b51a-3aef98cbd237","preferred_username":"alice_lead","scope":"profile email","sid":"Jt_LJgijXDnv3POdi6pTX0Bx","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:09:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b589202b-53e3-448f-a5ed-76c3782eaeb2","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784484,"groups":["Engineering","Project-Alpha"],"iat":1776784184,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:cd9fc685-158c-5f3a-b51a-3aef98cbd237","preferred_username":"alice_lead","scope":"profile email","sid":"Jt_LJgijXDnv3POdi6pTX0Bx","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b589202b-53e3-448f-a5ed-76c3782eaeb2","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:09:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b589202b-53e3-448f-a5ed-76c3782eaeb2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:09:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b589202b-53e3-448f-a5ed-76c3782eaeb2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:09:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b589202b-53e3-448f-a5ed-76c3782eaeb2","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:09:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b589202b-53e3-448f-a5ed-76c3782eaeb2","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:09:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b589202b-53e3-448f-a5ed-76c3782eaeb2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:09:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b589202b-53e3-448f-a5ed-76c3782eaeb2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:09:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea8b15cb-7739-4f8f-a92e-8d29f64597f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:17520","PortSpecifier":{"PortValue":17520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea8b15cb-7739-4f8f-a92e-8d29f64597f8","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:09:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea8b15cb-7739-4f8f-a92e-8d29f64597f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:17520","PortSpecifier":{"PortValue":17520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784199,"nanos":944160083},"http":{"id":"ea8b15cb-7739-4f8f-a92e-8d29f64597f8","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea8b15cb-7739-4f8f-a92e-8d29f64597f8","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784484,"groups":["Engineering","Project-Alpha"],"iat":1776784184,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:cd9fc685-158c-5f3a-b51a-3aef98cbd237","preferred_username":"alice_lead","scope":"profile email","sid":"Jt_LJgijXDnv3POdi6pTX0Bx","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:09:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea8b15cb-7739-4f8f-a92e-8d29f64597f8","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784484,"groups":["Engineering","Project-Alpha"],"iat":1776784184,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:cd9fc685-158c-5f3a-b51a-3aef98cbd237","preferred_username":"alice_lead","scope":"profile email","sid":"Jt_LJgijXDnv3POdi6pTX0Bx","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:09:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea8b15cb-7739-4f8f-a92e-8d29f64597f8","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:09:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea8b15cb-7739-4f8f-a92e-8d29f64597f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:09:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea8b15cb-7739-4f8f-a92e-8d29f64597f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:09:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea8b15cb-7739-4f8f-a92e-8d29f64597f8","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:09:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea8b15cb-7739-4f8f-a92e-8d29f64597f8","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:09:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea8b15cb-7739-4f8f-a92e-8d29f64597f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:09:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea8b15cb-7739-4f8f-a92e-8d29f64597f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:10:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b415a7f-0f7d-4cf3-b8ac-0b86a72592c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:5168","PortSpecifier":{"PortValue":5168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b415a7f-0f7d-4cf3-b8ac-0b86a72592c4","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:10:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b415a7f-0f7d-4cf3-b8ac-0b86a72592c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:5168","PortSpecifier":{"PortValue":5168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784204,"nanos":972784566},"http":{"id":"8b415a7f-0f7d-4cf3-b8ac-0b86a72592c4","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:10:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b415a7f-0f7d-4cf3-b8ac-0b86a72592c4","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784484,"groups":["Engineering","Project-Alpha"],"iat":1776784184,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:cd9fc685-158c-5f3a-b51a-3aef98cbd237","preferred_username":"alice_lead","scope":"profile email","sid":"Jt_LJgijXDnv3POdi6pTX0Bx","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:10:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b415a7f-0f7d-4cf3-b8ac-0b86a72592c4","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784484,"groups":["Engineering","Project-Alpha"],"iat":1776784184,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:cd9fc685-158c-5f3a-b51a-3aef98cbd237","preferred_username":"alice_lead","scope":"profile email","sid":"Jt_LJgijXDnv3POdi6pTX0Bx","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:10:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b415a7f-0f7d-4cf3-b8ac-0b86a72592c4","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:10:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b415a7f-0f7d-4cf3-b8ac-0b86a72592c4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:10:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b415a7f-0f7d-4cf3-b8ac-0b86a72592c4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:10:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b415a7f-0f7d-4cf3-b8ac-0b86a72592c4","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:10:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b415a7f-0f7d-4cf3-b8ac-0b86a72592c4","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:10:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b415a7f-0f7d-4cf3-b8ac-0b86a72592c4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:10:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b415a7f-0f7d-4cf3-b8ac-0b86a72592c4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:10:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab5c9f19-52e9-4f8a-8338-3202083393ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:42474","PortSpecifier":{"PortValue":42474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab5c9f19-52e9-4f8a-8338-3202083393ac","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:10:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab5c9f19-52e9-4f8a-8338-3202083393ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:42474","PortSpecifier":{"PortValue":42474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784210,"nanos":3912030},"http":{"id":"ab5c9f19-52e9-4f8a-8338-3202083393ac","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:10:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab5c9f19-52e9-4f8a-8338-3202083393ac","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784484,"groups":["Engineering","Project-Alpha"],"iat":1776784184,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:cd9fc685-158c-5f3a-b51a-3aef98cbd237","preferred_username":"alice_lead","scope":"profile email","sid":"Jt_LJgijXDnv3POdi6pTX0Bx","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab5c9f19-52e9-4f8a-8338-3202083393ac","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784484,"groups":["Engineering","Project-Alpha"],"iat":1776784184,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:cd9fc685-158c-5f3a-b51a-3aef98cbd237","preferred_username":"alice_lead","scope":"profile email","sid":"Jt_LJgijXDnv3POdi6pTX0Bx","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab5c9f19-52e9-4f8a-8338-3202083393ac","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab5c9f19-52e9-4f8a-8338-3202083393ac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab5c9f19-52e9-4f8a-8338-3202083393ac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab5c9f19-52e9-4f8a-8338-3202083393ac","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab5c9f19-52e9-4f8a-8338-3202083393ac","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:10:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab5c9f19-52e9-4f8a-8338-3202083393ac","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:10:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab5c9f19-52e9-4f8a-8338-3202083393ac","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c471b6f4-4756-4bb7-84b2-203c2754bdbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:59614","PortSpecifier":{"PortValue":59614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c471b6f4-4756-4bb7-84b2-203c2754bdbc","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c471b6f4-4756-4bb7-84b2-203c2754bdbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:59614","PortSpecifier":{"PortValue":59614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784215,"nanos":36092220},"http":{"id":"c471b6f4-4756-4bb7-84b2-203c2754bdbc","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c471b6f4-4756-4bb7-84b2-203c2754bdbc","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784484,"groups":["Engineering","Project-Alpha"],"iat":1776784184,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:cd9fc685-158c-5f3a-b51a-3aef98cbd237","preferred_username":"alice_lead","scope":"profile email","sid":"Jt_LJgijXDnv3POdi6pTX0Bx","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c471b6f4-4756-4bb7-84b2-203c2754bdbc","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784484,"groups":["Engineering","Project-Alpha"],"iat":1776784184,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:cd9fc685-158c-5f3a-b51a-3aef98cbd237","preferred_username":"alice_lead","scope":"profile email","sid":"Jt_LJgijXDnv3POdi6pTX0Bx","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c471b6f4-4756-4bb7-84b2-203c2754bdbc","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c471b6f4-4756-4bb7-84b2-203c2754bdbc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c471b6f4-4756-4bb7-84b2-203c2754bdbc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c471b6f4-4756-4bb7-84b2-203c2754bdbc","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c471b6f4-4756-4bb7-84b2-203c2754bdbc","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c471b6f4-4756-4bb7-84b2-203c2754bdbc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c471b6f4-4756-4bb7-84b2-203c2754bdbc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97fa05d8-68ac-4f5e-8235-6d41504ae782","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:58442","PortSpecifier":{"PortValue":58442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97fa05d8-68ac-4f5e-8235-6d41504ae782","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97fa05d8-68ac-4f5e-8235-6d41504ae782","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:58442","PortSpecifier":{"PortValue":58442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784215,"nanos":64617714},"http":{"id":"97fa05d8-68ac-4f5e-8235-6d41504ae782","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97fa05d8-68ac-4f5e-8235-6d41504ae782","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qECpb0AQSWjxaTBU_l8X67fcCcFjGdcTobLBPMPZXLHTjQiS7etwQIOpWsrh"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97fa05d8-68ac-4f5e-8235-6d41504ae782","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qECpb0AQSWjxaTBU_l8X67fcCcFjGdcTobLBPMPZXLHTjQiS7etwQIOpWsrh\"}"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97fa05d8-68ac-4f5e-8235-6d41504ae782","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97fa05d8-68ac-4f5e-8235-6d41504ae782","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97fa05d8-68ac-4f5e-8235-6d41504ae782","config":{"Name":"api-key-valid","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97fa05d8-68ac-4f5e-8235-6d41504ae782","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97fa05d8-68ac-4f5e-8235-6d41504ae782","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97fa05d8-68ac-4f5e-8235-6d41504ae782","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"info","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97fa05d8-68ac-4f5e-8235-6d41504ae782","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97fa05d8-68ac-4f5e-8235-6d41504ae782","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a46cd1a7-9c3b-46dd-8f06-c6f4ee39952a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:4048","PortSpecifier":{"PortValue":4048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a46cd1a7-9c3b-46dd-8f06-c6f4ee39952a","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a46cd1a7-9c3b-46dd-8f06-c6f4ee39952a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:4048","PortSpecifier":{"PortValue":4048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784215,"nanos":72108777},"http":{"id":"a46cd1a7-9c3b-46dd-8f06-c6f4ee39952a","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a46cd1a7-9c3b-46dd-8f06-c6f4ee39952a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qECpb0AQSWjxaTBU_l8X67fcCcFjGdcTobLBPMPZXLHTjQiS7etwQIOpWsrh"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a46cd1a7-9c3b-46dd-8f06-c6f4ee39952a","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qECpb0AQSWjxaTBU_l8X67fcCcFjGdcTobLBPMPZXLHTjQiS7etwQIOpWsrh\"}"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a46cd1a7-9c3b-46dd-8f06-c6f4ee39952a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a46cd1a7-9c3b-46dd-8f06-c6f4ee39952a","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a46cd1a7-9c3b-46dd-8f06-c6f4ee39952a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a46cd1a7-9c3b-46dd-8f06-c6f4ee39952a","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-qECpb0AQSWjxaTBU_l8X67fcCcFjGdcTobLBPMPZXLHTjQiS7etwQIOpWsrh","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.36~maas-default-gateway-openshift-default-58b6f876-vbvzt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"a46cd1a7-9c3b-46dd-8f06-c6f4ee39952a"},"host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","id":"a46cd1a7-9c3b-46dd-8f06-c6f4ee39952a","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":72108777,"seconds":1776784215},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"100.64.0.2:4048","port":4048}}} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a46cd1a7-9c3b-46dd-8f06-c6f4ee39952a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a46cd1a7-9c3b-46dd-8f06-c6f4ee39952a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a46cd1a7-9c3b-46dd-8f06-c6f4ee39952a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a46cd1a7-9c3b-46dd-8f06-c6f4ee39952a","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a46cd1a7-9c3b-46dd-8f06-c6f4ee39952a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a46cd1a7-9c3b-46dd-8f06-c6f4ee39952a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"5c97a209-7817-4228-9024-9738caaa06e5","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}} {"level":"info","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a46cd1a7-9c3b-46dd-8f06-c6f4ee39952a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a46cd1a7-9c3b-46dd-8f06-c6f4ee39952a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e5c736e-d869-435b-b21a-1f4a93d3f0bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:37848","PortSpecifier":{"PortValue":37848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e5c736e-d869-435b-b21a-1f4a93d3f0bf","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e5c736e-d869-435b-b21a-1f4a93d3f0bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:37848","PortSpecifier":{"PortValue":37848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784215,"nanos":96385160},"http":{"id":"8e5c736e-d869-435b-b21a-1f4a93d3f0bf","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e5c736e-d869-435b-b21a-1f4a93d3f0bf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qECpb0AQSWjxaTBU_l8X67fcCcFjGdcTobLBPMPZXLHTjQiS7etwQIOpWsrh"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e5c736e-d869-435b-b21a-1f4a93d3f0bf","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qECpb0AQSWjxaTBU_l8X67fcCcFjGdcTobLBPMPZXLHTjQiS7etwQIOpWsrh\"}"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e5c736e-d869-435b-b21a-1f4a93d3f0bf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e5c736e-d869-435b-b21a-1f4a93d3f0bf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e5c736e-d869-435b-b21a-1f4a93d3f0bf","config":{"Name":"api-key-valid","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e5c736e-d869-435b-b21a-1f4a93d3f0bf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e5c736e-d869-435b-b21a-1f4a93d3f0bf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e5c736e-d869-435b-b21a-1f4a93d3f0bf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"info","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e5c736e-d869-435b-b21a-1f4a93d3f0bf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e5c736e-d869-435b-b21a-1f4a93d3f0bf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2eea1e3a-6f17-41f4-8957-bbb760e30c9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:4048","PortSpecifier":{"PortValue":4048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2eea1e3a-6f17-41f4-8957-bbb760e30c9f","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2eea1e3a-6f17-41f4-8957-bbb760e30c9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:4048","PortSpecifier":{"PortValue":4048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784215,"nanos":102298658},"http":{"id":"2eea1e3a-6f17-41f4-8957-bbb760e30c9f","method":"GET","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2eea1e3a-6f17-41f4-8957-bbb760e30c9f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qECpb0AQSWjxaTBU_l8X67fcCcFjGdcTobLBPMPZXLHTjQiS7etwQIOpWsrh"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2eea1e3a-6f17-41f4-8957-bbb760e30c9f","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qECpb0AQSWjxaTBU_l8X67fcCcFjGdcTobLBPMPZXLHTjQiS7etwQIOpWsrh\"}"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2eea1e3a-6f17-41f4-8957-bbb760e30c9f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2eea1e3a-6f17-41f4-8957-bbb760e30c9f","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2eea1e3a-6f17-41f4-8957-bbb760e30c9f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2eea1e3a-6f17-41f4-8957-bbb760e30c9f","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-qECpb0AQSWjxaTBU_l8X67fcCcFjGdcTobLBPMPZXLHTjQiS7etwQIOpWsrh","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.36~maas-default-gateway-openshift-default-58b6f876-vbvzt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"2eea1e3a-6f17-41f4-8957-bbb760e30c9f"},"host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","id":"2eea1e3a-6f17-41f4-8957-bbb760e30c9f","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":102298658,"seconds":1776784215},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"100.64.0.2:4048","port":4048}}} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2eea1e3a-6f17-41f4-8957-bbb760e30c9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2eea1e3a-6f17-41f4-8957-bbb760e30c9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2eea1e3a-6f17-41f4-8957-bbb760e30c9f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2eea1e3a-6f17-41f4-8957-bbb760e30c9f","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2eea1e3a-6f17-41f4-8957-bbb760e30c9f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2eea1e3a-6f17-41f4-8957-bbb760e30c9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"5c97a209-7817-4228-9024-9738caaa06e5","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}} {"level":"info","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2eea1e3a-6f17-41f4-8957-bbb760e30c9f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2eea1e3a-6f17-41f4-8957-bbb760e30c9f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ca76ab5-840c-40cc-b297-2e0740fee367","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:64442","PortSpecifier":{"PortValue":64442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ca76ab5-840c-40cc-b297-2e0740fee367","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ca76ab5-840c-40cc-b297-2e0740fee367","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:64442","PortSpecifier":{"PortValue":64442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784215,"nanos":198417564},"http":{"id":"8ca76ab5-840c-40cc-b297-2e0740fee367","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ca76ab5-840c-40cc-b297-2e0740fee367","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784515,"groups":["Engineering","Project-Alpha"],"iat":1776784215,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:01ee32db-9b35-0717-be23-94b3743c79e9","preferred_username":"alice_lead","scope":"profile email","sid":"Q6KuxzCQjHH7G7ymmlrScKN9","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ca76ab5-840c-40cc-b297-2e0740fee367","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784515,"groups":["Engineering","Project-Alpha"],"iat":1776784215,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:01ee32db-9b35-0717-be23-94b3743c79e9","preferred_username":"alice_lead","scope":"profile email","sid":"Q6KuxzCQjHH7G7ymmlrScKN9","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ca76ab5-840c-40cc-b297-2e0740fee367","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ca76ab5-840c-40cc-b297-2e0740fee367","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ca76ab5-840c-40cc-b297-2e0740fee367","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ca76ab5-840c-40cc-b297-2e0740fee367","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ca76ab5-840c-40cc-b297-2e0740fee367","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ca76ab5-840c-40cc-b297-2e0740fee367","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ca76ab5-840c-40cc-b297-2e0740fee367","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:10:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91bddb89-d1ba-45f0-a19f-972cb7c07e9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:19976","PortSpecifier":{"PortValue":19976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91bddb89-d1ba-45f0-a19f-972cb7c07e9d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:10:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91bddb89-d1ba-45f0-a19f-972cb7c07e9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:19976","PortSpecifier":{"PortValue":19976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776784220,"nanos":225639716},"http":{"id":"91bddb89-d1ba-45f0-a19f-972cb7c07e9d","method":"POST","headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:10:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91bddb89-d1ba-45f0-a19f-972cb7c07e9d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784515,"groups":["Engineering","Project-Alpha"],"iat":1776784215,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:01ee32db-9b35-0717-be23-94b3743c79e9","preferred_username":"alice_lead","scope":"profile email","sid":"Q6KuxzCQjHH7G7ymmlrScKN9","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91bddb89-d1ba-45f0-a19f-972cb7c07e9d","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776784515,"groups":["Engineering","Project-Alpha"],"iat":1776784215,"iss":"https://keycloak.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:01ee32db-9b35-0717-be23-94b3743c79e9","preferred_username":"alice_lead","scope":"profile email","sid":"Q6KuxzCQjHH7G7ymmlrScKN9","sub":"1ad5d981-dc08-42be-bd57-a8ad48a86372","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.a750dba1-756a-4c3d-b1ec-f491fcdd8f84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91bddb89-d1ba-45f0-a19f-972cb7c07e9d","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91bddb89-d1ba-45f0-a19f-972cb7c07e9d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91bddb89-d1ba-45f0-a19f-972cb7c07e9d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91bddb89-d1ba-45f0-a19f-972cb7c07e9d","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91bddb89-d1ba-45f0-a19f-972cb7c07e9d","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:10:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91bddb89-d1ba-45f0-a19f-972cb7c07e9d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:10:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91bddb89-d1ba-45f0-a19f-972cb7c07e9d","authorized":true,"response":"OK"}