{"level":"debug","ts":"2026-06-10T01:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T01:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T01:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T01:40:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T01:40:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"info","ts":"2026-06-10T01:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T01:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"debug","ts":"2026-06-10T01:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T01:40:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T01:40:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T01:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"debug","ts":"2026-06-10T01:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T01:40:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T01:40:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-10T01:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T01:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"debug","ts":"2026-06-10T01:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T01:40:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T01:40:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-10T01:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T01:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T01:40:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T01:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T01:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T01:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T01:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"error","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"debug","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T01:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T01:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T01:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T01:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T01:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T01:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T01:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T01:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T01:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T01:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T01:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T01:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T01:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-10T01:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T01:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-10T01:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T01:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T01:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T01:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd48e107-1bd1-44e7-8dcc-509e95211e80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:23832","PortSpecifier":{"PortValue":23832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd48e107-1bd1-44e7-8dcc-509e95211e80","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd48e107-1bd1-44e7-8dcc-509e95211e80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:23832","PortSpecifier":{"PortValue":23832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055657,"nanos":386524089},"http":{"id":"cd48e107-1bd1-44e7-8dcc-509e95211e80","method":"POST","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"cd48e107-1bd1-44e7-8dcc-509e95211e80","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd48e107-1bd1-44e7-8dcc-509e95211e80","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd48e107-1bd1-44e7-8dcc-509e95211e80","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"717bc6b3-51c3-4478-baba-6432b204871e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1002ba0a-74ea-46e5-8620-bd41184c5e66"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/986799a1ba17"]}}
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd48e107-1bd1-44e7-8dcc-509e95211e80","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/986799a1ba17"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1002ba0a-74ea-46e5-8620-bd41184c5e66"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"717bc6b3-51c3-4478-baba-6432b204871e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd48e107-1bd1-44e7-8dcc-509e95211e80","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd48e107-1bd1-44e7-8dcc-509e95211e80","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd48e107-1bd1-44e7-8dcc-509e95211e80","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd48e107-1bd1-44e7-8dcc-509e95211e80","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b16c2b92-409b-4f9e-816d-321cba77b415","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:29066","PortSpecifier":{"PortValue":29066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b16c2b92-409b-4f9e-816d-321cba77b415","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b16c2b92-409b-4f9e-816d-321cba77b415","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:29066","PortSpecifier":{"PortValue":29066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055657,"nanos":767675585},"http":{"id":"b16c2b92-409b-4f9e-816d-321cba77b415","method":"POST","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"info","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b16c2b92-409b-4f9e-816d-321cba77b415","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}}
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b16c2b92-409b-4f9e-816d-321cba77b415","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdcd1344-fd25-479e-a24e-61e10e9cb678","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:4940","PortSpecifier":{"PortValue":4940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bdcd1344-fd25-479e-a24e-61e10e9cb678","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdcd1344-fd25-479e-a24e-61e10e9cb678","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:4940","PortSpecifier":{"PortValue":4940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055657,"nanos":791700426},"http":{"id":"bdcd1344-fd25-479e-a24e-61e10e9cb678","method":"POST","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"httpbin.org:443/*","x-envoy-external-address":"100.64.0.4","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-gateway-model-name":"e2e-external-model","x-request-id":"bdcd1344-fd25-479e-a24e-61e10e9cb678"},"path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"},"metadata_context":{}}}
{"level":"info","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdcd1344-fd25-479e-a24e-61e10e9cb678","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}}
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdcd1344-fd25-479e-a24e-61e10e9cb678","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed8cadc5-f7fb-42e3-aa1e-83967ee985ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:39278","PortSpecifier":{"PortValue":39278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed8cadc5-f7fb-42e3-aa1e-83967ee985ce","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed8cadc5-f7fb-42e3-aa1e-83967ee985ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:39278","PortSpecifier":{"PortValue":39278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055657,"nanos":815453629},"http":{"id":"ed8cadc5-f7fb-42e3-aa1e-83967ee985ce","method":"POST","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed8cadc5-f7fb-42e3-aa1e-83967ee985ce","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JiWULZr6XNNk7idu_4QjbW1TpRGix6fewpA41wmRjMKSyKK8yIheNgGK7vll"}
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ed8cadc5-f7fb-42e3-aa1e-83967ee985ce","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JiWULZr6XNNk7idu_4QjbW1TpRGix6fewpA41wmRjMKSyKK8yIheNgGK7vll\"}"}
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ed8cadc5-f7fb-42e3-aa1e-83967ee985ce","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ed8cadc5-f7fb-42e3-aa1e-83967ee985ce","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-external-model\",\"requestedSubscription\":\"e2e-external-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ed8cadc5-f7fb-42e3-aa1e-83967ee985ce","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-external-model","source":"external","token_rate_limits":[{"limit":10000,"window":"1h"}]}],"name":"e2e-external-subscription","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed8cadc5-f7fb-42e3-aa1e-83967ee985ce","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed8cadc5-f7fb-42e3-aa1e-83967ee985ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed8cadc5-f7fb-42e3-aa1e-83967ee985ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed8cadc5-f7fb-42e3-aa1e-83967ee985ce","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed8cadc5-f7fb-42e3-aa1e-83967ee985ce","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed8cadc5-f7fb-42e3-aa1e-83967ee985ce","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-external-subscription"}
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed8cadc5-f7fb-42e3-aa1e-83967ee985ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"35227bd7-6e74-4299-ae81-24ffa9e20f60","selected_subscription":"e2e-external-subscription","selected_subscription_key":"models-as-a-service/e2e-external-subscription@llm/e2e-external-model","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"e2e-external-model","source":"external","token_rate_limits":[{"limit":10000,"window":"1h"}]}],"name":"e2e-external-subscription","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed8cadc5-f7fb-42e3-aa1e-83967ee985ce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:40:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed8cadc5-f7fb-42e3-aa1e-83967ee985ce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"}
{"level":"debug","ts":"2026-06-10T01:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T01:40:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T01:40:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"}
{"level":"info","ts":"2026-06-10T01:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"}
{"level":"info","ts":"2026-06-10T01:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T01:40:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T01:40:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T01:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"}
{"level":"debug","ts":"2026-06-10T01:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T01:40:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T01:40:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T01:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"}
{"level":"debug","ts":"2026-06-10T01:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T01:41:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"}
{"level":"info","ts":"2026-06-10T01:41:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"}
{"level":"info","ts":"2026-06-10T01:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-10T01:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326dcb84a633ab5a19acaf59dd41b7cdf918f24e4b9a572377a993d6bb95d847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T01:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T01:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326dcb84a633ab5a19acaf59dd41b7cdf918f24e4b9a572377a993d6bb95d847"}
{"level":"info","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326dcb84a633ab5a19acaf59dd41b7cdf918f24e4b9a572377a993d6bb95d847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326dcb84a633ab5a19acaf59dd41b7cdf918f24e4b9a572377a993d6bb95d847","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326dcb84a633ab5a19acaf59dd41b7cdf918f24e4b9a572377a993d6bb95d847"}
{"level":"debug","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326dcb84a633ab5a19acaf59dd41b7cdf918f24e4b9a572377a993d6bb95d847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T01:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T01:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["326dcb84a633ab5a19acaf59dd41b7cdf918f24e4b9a572377a993d6bb95d847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326dcb84a633ab5a19acaf59dd41b7cdf918f24e4b9a572377a993d6bb95d847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326dcb84a633ab5a19acaf59dd41b7cdf918f24e4b9a572377a993d6bb95d847","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326dcb84a633ab5a19acaf59dd41b7cdf918f24e4b9a572377a993d6bb95d847"}
{"level":"debug","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T01:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T01:41:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2"}
{"level":"info","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T01:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T01:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2"}
{"level":"info","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2"}
{"level":"debug","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T01:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T01:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T01:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T01:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2"}
{"level":"info","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2"}
{"level":"debug","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T01:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T01:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T01:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2"}
{"level":"info","ts":"2026-06-10T01:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8859cbb7b2a6c3363feb46b6cfa1cc2f842d4d0cb893125307c69f4eaa7635a2"}
{"level":"info","ts":"2026-06-10T01:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/326dcb84a633ab5a19acaf59dd41b7cdf918f24e4b9a572377a993d6bb95d847"}
{"level":"debug","ts":"2026-06-10T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05b64244a95720af7edc6c481a21371cd5caf0fe60c84f888a35faa34d461195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T01:41:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T01:41:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05b64244a95720af7edc6c481a21371cd5caf0fe60c84f888a35faa34d461195"}
{"level":"info","ts":"2026-06-10T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05b64244a95720af7edc6c481a21371cd5caf0fe60c84f888a35faa34d461195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05b64244a95720af7edc6c481a21371cd5caf0fe60c84f888a35faa34d461195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T01:41:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T01:41:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05b64244a95720af7edc6c481a21371cd5caf0fe60c84f888a35faa34d461195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05b64244a95720af7edc6c481a21371cd5caf0fe60c84f888a35faa34d461195"}
{"level":"info","ts":"2026-06-10T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05b64244a95720af7edc6c481a21371cd5caf0fe60c84f888a35faa34d461195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05b64244a95720af7edc6c481a21371cd5caf0fe60c84f888a35faa34d461195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T01:41:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T01:41:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05b64244a95720af7edc6c481a21371cd5caf0fe60c84f888a35faa34d461195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05b64244a95720af7edc6c481a21371cd5caf0fe60c84f888a35faa34d461195"}
{"level":"error","ts":"2026-06-10T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"05b64244a95720af7edc6c481a21371cd5caf0fe60c84f888a35faa34d461195","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"05b64244a95720af7edc6c481a21371cd5caf0fe60c84f888a35faa34d461195\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-10T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05b64244a95720af7edc6c481a21371cd5caf0fe60c84f888a35faa34d461195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05b64244a95720af7edc6c481a21371cd5caf0fe60c84f888a35faa34d461195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T01:41:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T01:41:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe"}
{"level":"info","ts":"2026-06-10T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe"}
{"level":"debug","ts":"2026-06-10T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T01:41:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T01:41:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T01:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T01:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe"}
{"level":"info","ts":"2026-06-10T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T01:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T01:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe"}
{"level":"info","ts":"2026-06-10T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T01:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T01:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe"}
{"level":"info","ts":"2026-06-10T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe"}
{"level":"debug","ts":"2026-06-10T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T01:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T01:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-10T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-10T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-10T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe"}
{"level":"info","ts":"2026-06-10T01:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8f6f549830be3cf6743a50cc90215a12dde4779f0d3bb8f41a137143f51e6fe"}
{"level":"info","ts":"2026-06-10T01:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05b64244a95720af7edc6c481a21371cd5caf0fe60c84f888a35faa34d461195"}
{"level":"info","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"811842a3-651b-407b-ae5d-414e0dc64733","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:12032","PortSpecifier":{"PortValue":12032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"811842a3-651b-407b-ae5d-414e0dc64733","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"811842a3-651b-407b-ae5d-414e0dc64733","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:12032","PortSpecifier":{"PortValue":12032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055723,"nanos":305403356},"http":{"id":"811842a3-651b-407b-ae5d-414e0dc64733","method":"POST","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"811842a3-651b-407b-ae5d-414e0dc64733","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056023,"groups":["Engineering","Project-Alpha"],"iat":1781055723,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8bde123c-2baf-bb8d-0c02-41addbbb2493","preferred_username":"alice_lead","scope":"profile email","sid":"Ipxri0BhhjCe6QOZH-181c2y","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"811842a3-651b-407b-ae5d-414e0dc64733","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056023,"groups":["Engineering","Project-Alpha"],"iat":1781055723,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8bde123c-2baf-bb8d-0c02-41addbbb2493","preferred_username":"alice_lead","scope":"profile email","sid":"Ipxri0BhhjCe6QOZH-181c2y","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"811842a3-651b-407b-ae5d-414e0dc64733","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"811842a3-651b-407b-ae5d-414e0dc64733","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"811842a3-651b-407b-ae5d-414e0dc64733","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"811842a3-651b-407b-ae5d-414e0dc64733","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"811842a3-651b-407b-ae5d-414e0dc64733","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6976f56b-0d55-45bf-a1c8-80c0a8a430eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:6312","PortSpecifier":{"PortValue":6312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6976f56b-0d55-45bf-a1c8-80c0a8a430eb","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6976f56b-0d55-45bf-a1c8-80c0a8a430eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:6312","PortSpecifier":{"PortValue":6312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055723,"nanos":481566106},"http":{"id":"6976f56b-0d55-45bf-a1c8-80c0a8a430eb","method":"POST","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"6976f56b-0d55-45bf-a1c8-80c0a8a430eb","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6976f56b-0d55-45bf-a1c8-80c0a8a430eb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"6976f56b-0d55-45bf-a1c8-80c0a8a430eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"not authenticated"}
{"level":"info","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6976f56b-0d55-45bf-a1c8-80c0a8a430eb","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}"}}
{"level":"debug","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6976f56b-0d55-45bf-a1c8-80c0a8a430eb","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62d63936-5d63-4d91-8756-958483f8448f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:18700","PortSpecifier":{"PortValue":18700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62d63936-5d63-4d91-8756-958483f8448f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62d63936-5d63-4d91-8756-958483f8448f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:18700","PortSpecifier":{"PortValue":18700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055723,"nanos":573144077},"http":{"id":"62d63936-5d63-4d91-8756-958483f8448f","method":"POST","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer","content-length":"35","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.28~maas-default-gateway-openshift-default-8559cd5744-n622k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-request-id":"62d63936-5d63-4d91-8756-958483f8448f"},"path":"/maas-api/v1/api-keys","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"metadata_context":{}}}
{"level":"debug","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"62d63936-5d63-4d91-8756-958483f8448f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"credential not found"}
{"level":"info","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62d63936-5d63-4d91-8756-958483f8448f","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"openshift-identities\":\"credential not found\"}"}}
{"level":"debug","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62d63936-5d63-4d91-8756-958483f8448f","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"openshift-identities\":\"credential not found\"}","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98085ec3-ea92-412f-85b0-444c7f731981","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:24908","PortSpecifier":{"PortValue":24908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98085ec3-ea92-412f-85b0-444c7f731981","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98085ec3-ea92-412f-85b0-444c7f731981","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:24908","PortSpecifier":{"PortValue":24908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055723,"nanos":615577216},"http":{"id":"98085ec3-ea92-412f-85b0-444c7f731981","method":"POST","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-length":"36","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.28~maas-default-gateway-openshift-default-8559cd5744-n622k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-request-id":"98085ec3-ea92-412f-85b0-444c7f731981"},"path":"/maas-api/v1/api-keys","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"metadata_context":{}}}
{"level":"info","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98085ec3-ea92-412f-85b0-444c7f731981","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}"}}
{"level":"debug","ts":"2026-06-10T01:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98085ec3-ea92-412f-85b0-444c7f731981","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1382a11a-060c-4930-a92c-1eae3e242994","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:12034","PortSpecifier":{"PortValue":12034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1382a11a-060c-4930-a92c-1eae3e242994","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1382a11a-060c-4930-a92c-1eae3e242994","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:12034","PortSpecifier":{"PortValue":12034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055724,"nanos":275834994},"http":{"id":"1382a11a-060c-4930-a92c-1eae3e242994","method":"POST","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1382a11a-060c-4930-a92c-1eae3e242994","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056024,"groups":["Site-Reliability"],"iat":1781055724,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:b7e24652-d774-f038-bd8a-4b3583d7f6a6","preferred_username":"bob_sre","scope":"profile email","sid":"YEbHe1itT1anFb8uO7LRqmoe","sub":"ebb1bb39-f650-438b-8176-c6a6903d0f4e","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1382a11a-060c-4930-a92c-1eae3e242994","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056024,"groups":["Site-Reliability"],"iat":1781055724,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:b7e24652-d774-f038-bd8a-4b3583d7f6a6","preferred_username":"bob_sre","scope":"profile email","sid":"YEbHe1itT1anFb8uO7LRqmoe","sub":"ebb1bb39-f650-438b-8176-c6a6903d0f4e","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1382a11a-060c-4930-a92c-1eae3e242994","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1382a11a-060c-4930-a92c-1eae3e242994","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1382a11a-060c-4930-a92c-1eae3e242994","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"}
{"level":"info","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1382a11a-060c-4930-a92c-1eae3e242994","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1382a11a-060c-4930-a92c-1eae3e242994","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"732340ce-b267-48f1-9a0f-e5e0c1298a2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:18710","PortSpecifier":{"PortValue":18710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"732340ce-b267-48f1-9a0f-e5e0c1298a2d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"732340ce-b267-48f1-9a0f-e5e0c1298a2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:18710","PortSpecifier":{"PortValue":18710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055724,"nanos":664230269},"http":{"id":"732340ce-b267-48f1-9a0f-e5e0c1298a2d","method":"POST","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"732340ce-b267-48f1-9a0f-e5e0c1298a2d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056024,"groups":["Engineering","Project-Alpha"],"iat":1781055724,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:f3a1b2c2-2b6b-0e55-8894-96a1e30cde61","preferred_username":"alice_lead","scope":"profile email","sid":"cXSJSy9U4_vlPq5FcMaFteLS","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"732340ce-b267-48f1-9a0f-e5e0c1298a2d","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056024,"groups":["Engineering","Project-Alpha"],"iat":1781055724,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:f3a1b2c2-2b6b-0e55-8894-96a1e30cde61","preferred_username":"alice_lead","scope":"profile email","sid":"cXSJSy9U4_vlPq5FcMaFteLS","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"732340ce-b267-48f1-9a0f-e5e0c1298a2d","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"732340ce-b267-48f1-9a0f-e5e0c1298a2d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"732340ce-b267-48f1-9a0f-e5e0c1298a2d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"732340ce-b267-48f1-9a0f-e5e0c1298a2d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"732340ce-b267-48f1-9a0f-e5e0c1298a2d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f15a8ed1-3ced-4d07-8c43-81b3fe86d183","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:24914","PortSpecifier":{"PortValue":24914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f15a8ed1-3ced-4d07-8c43-81b3fe86d183","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f15a8ed1-3ced-4d07-8c43-81b3fe86d183","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:24914","PortSpecifier":{"PortValue":24914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055724,"nanos":691968073},"http":{"id":"f15a8ed1-3ced-4d07-8c43-81b3fe86d183","method":"GET","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f15a8ed1-3ced-4d07-8c43-81b3fe86d183","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12Ec9n0roEFWq4ggS_xDTlfkz7LSn7tBCtMvEsm0gWtZ3YIb3aIQRc8JM6Jtb"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f15a8ed1-3ced-4d07-8c43-81b3fe86d183","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12Ec9n0roEFWq4ggS_xDTlfkz7LSn7tBCtMvEsm0gWtZ3YIb3aIQRc8JM6Jtb\"}"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f15a8ed1-3ced-4d07-8c43-81b3fe86d183","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f15a8ed1-3ced-4d07-8c43-81b3fe86d183","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f15a8ed1-3ced-4d07-8c43-81b3fe86d183","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f15a8ed1-3ced-4d07-8c43-81b3fe86d183","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f15a8ed1-3ced-4d07-8c43-81b3fe86d183","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f15a8ed1-3ced-4d07-8c43-81b3fe86d183","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f15a8ed1-3ced-4d07-8c43-81b3fe86d183","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34343e52-d9ce-47be-ad0d-cf4ce8d24b84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:53618","PortSpecifier":{"PortValue":53618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34343e52-d9ce-47be-ad0d-cf4ce8d24b84","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34343e52-d9ce-47be-ad0d-cf4ce8d24b84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:53618","PortSpecifier":{"PortValue":53618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055724,"nanos":708338407},"http":{"id":"34343e52-d9ce-47be-ad0d-cf4ce8d24b84","method":"GET","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34343e52-d9ce-47be-ad0d-cf4ce8d24b84","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12Ec9n0roEFWq4ggS_xDTlfkz7LSn7tBCtMvEsm0gWtZ3YIb3aIQRc8JM6Jtb"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"34343e52-d9ce-47be-ad0d-cf4ce8d24b84","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12Ec9n0roEFWq4ggS_xDTlfkz7LSn7tBCtMvEsm0gWtZ3YIb3aIQRc8JM6Jtb\"}"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"34343e52-d9ce-47be-ad0d-cf4ce8d24b84","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"34343e52-d9ce-47be-ad0d-cf4ce8d24b84","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"34343e52-d9ce-47be-ad0d-cf4ce8d24b84","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34343e52-d9ce-47be-ad0d-cf4ce8d24b84","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-12Ec9n0roEFWq4ggS_xDTlfkz7LSn7tBCtMvEsm0gWtZ3YIb3aIQRc8JM6Jtb","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.33","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.28~maas-default-gateway-openshift-default-8559cd5744-n622k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.134.0.33","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"34343e52-d9ce-47be-ad0d-cf4ce8d24b84"},"host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","id":"34343e52-d9ce-47be-ad0d-cf4ce8d24b84","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":708338407,"seconds":1781055724},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.134.0.33:53618","port":53618}}}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34343e52-d9ce-47be-ad0d-cf4ce8d24b84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34343e52-d9ce-47be-ad0d-cf4ce8d24b84","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34343e52-d9ce-47be-ad0d-cf4ce8d24b84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34343e52-d9ce-47be-ad0d-cf4ce8d24b84","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34343e52-d9ce-47be-ad0d-cf4ce8d24b84","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34343e52-d9ce-47be-ad0d-cf4ce8d24b84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"5ee62195-c4eb-4b72-83cd-d89b7785f9b9","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34343e52-d9ce-47be-ad0d-cf4ce8d24b84","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34343e52-d9ce-47be-ad0d-cf4ce8d24b84","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0050db03-e761-4500-92ce-8321ed23db16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:51800","PortSpecifier":{"PortValue":51800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0050db03-e761-4500-92ce-8321ed23db16","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0050db03-e761-4500-92ce-8321ed23db16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:51800","PortSpecifier":{"PortValue":51800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055724,"nanos":737096466},"http":{"id":"0050db03-e761-4500-92ce-8321ed23db16","method":"POST","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0050db03-e761-4500-92ce-8321ed23db16","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12Ec9n0roEFWq4ggS_xDTlfkz7LSn7tBCtMvEsm0gWtZ3YIb3aIQRc8JM6Jtb"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0050db03-e761-4500-92ce-8321ed23db16","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12Ec9n0roEFWq4ggS_xDTlfkz7LSn7tBCtMvEsm0gWtZ3YIb3aIQRc8JM6Jtb\"}"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0050db03-e761-4500-92ce-8321ed23db16","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0050db03-e761-4500-92ce-8321ed23db16","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0050db03-e761-4500-92ce-8321ed23db16","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0050db03-e761-4500-92ce-8321ed23db16","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0050db03-e761-4500-92ce-8321ed23db16","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0050db03-e761-4500-92ce-8321ed23db16","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0050db03-e761-4500-92ce-8321ed23db16","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0050db03-e761-4500-92ce-8321ed23db16","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0050db03-e761-4500-92ce-8321ed23db16","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0050db03-e761-4500-92ce-8321ed23db16","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"5ee62195-c4eb-4b72-83cd-d89b7785f9b9","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0050db03-e761-4500-92ce-8321ed23db16","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0050db03-e761-4500-92ce-8321ed23db16","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad611b1f-a64c-4837-92ff-eb8d5d7c3731","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:12036","PortSpecifier":{"PortValue":12036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad611b1f-a64c-4837-92ff-eb8d5d7c3731","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad611b1f-a64c-4837-92ff-eb8d5d7c3731","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:12036","PortSpecifier":{"PortValue":12036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055724,"nanos":896985352},"http":{"id":"ad611b1f-a64c-4837-92ff-eb8d5d7c3731","method":"POST","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad611b1f-a64c-4837-92ff-eb8d5d7c3731","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056024,"groups":["Engineering","Project-Alpha"],"iat":1781055724,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8bd5936f-72a8-f252-f824-e301e5e69de7","preferred_username":"alice_lead","scope":"profile email","sid":"boPBQN7c0hXXghErD0ZGpHRU","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad611b1f-a64c-4837-92ff-eb8d5d7c3731","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056024,"groups":["Engineering","Project-Alpha"],"iat":1781055724,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8bd5936f-72a8-f252-f824-e301e5e69de7","preferred_username":"alice_lead","scope":"profile email","sid":"boPBQN7c0hXXghErD0ZGpHRU","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad611b1f-a64c-4837-92ff-eb8d5d7c3731","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad611b1f-a64c-4837-92ff-eb8d5d7c3731","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad611b1f-a64c-4837-92ff-eb8d5d7c3731","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad611b1f-a64c-4837-92ff-eb8d5d7c3731","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad611b1f-a64c-4837-92ff-eb8d5d7c3731","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"471b4924-03e1-45fa-86fb-b8f36b4c7f52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:18718","PortSpecifier":{"PortValue":18718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"471b4924-03e1-45fa-86fb-b8f36b4c7f52","method":"DELETE","path":"/maas-api/v1/api-keys/29909c42-ac5a-4fb6-8a9e-0a20220bec66","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"471b4924-03e1-45fa-86fb-b8f36b4c7f52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:18718","PortSpecifier":{"PortValue":18718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055724,"nanos":929397830},"http":{"id":"471b4924-03e1-45fa-86fb-b8f36b4c7f52","method":"DELETE","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/29909c42-ac5a-4fb6-8a9e-0a20220bec66",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"471b4924-03e1-45fa-86fb-b8f36b4c7f52","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056024,"groups":["Engineering","Project-Alpha"],"iat":1781055724,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8bd5936f-72a8-f252-f824-e301e5e69de7","preferred_username":"alice_lead","scope":"profile email","sid":"boPBQN7c0hXXghErD0ZGpHRU","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"471b4924-03e1-45fa-86fb-b8f36b4c7f52","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056024,"groups":["Engineering","Project-Alpha"],"iat":1781055724,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8bd5936f-72a8-f252-f824-e301e5e69de7","preferred_username":"alice_lead","scope":"profile email","sid":"boPBQN7c0hXXghErD0ZGpHRU","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/29909c42-ac5a-4fb6-8a9e-0a20220bec66",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"471b4924-03e1-45fa-86fb-b8f36b4c7f52","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"471b4924-03e1-45fa-86fb-b8f36b4c7f52","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"471b4924-03e1-45fa-86fb-b8f36b4c7f52","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"471b4924-03e1-45fa-86fb-b8f36b4c7f52","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"471b4924-03e1-45fa-86fb-b8f36b4c7f52","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ccf6919a-21d6-4df7-807a-47342111eaec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:53938","PortSpecifier":{"PortValue":53938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ccf6919a-21d6-4df7-807a-47342111eaec","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ccf6919a-21d6-4df7-807a-47342111eaec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:53938","PortSpecifier":{"PortValue":53938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055727,"nanos":957693278},"http":{"id":"ccf6919a-21d6-4df7-807a-47342111eaec","method":"GET","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ccf6919a-21d6-4df7-807a-47342111eaec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ebJ7IQvyK64ZgXyr_VxzWIZp6vMgc9Iy7BL3uWOjgM8IHjCN5U8XVLQmNc2"}
{"level":"debug","ts":"2026-06-10T01:42:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ccf6919a-21d6-4df7-807a-47342111eaec","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ebJ7IQvyK64ZgXyr_VxzWIZp6vMgc9Iy7BL3uWOjgM8IHjCN5U8XVLQmNc2\"}"}
{"level":"debug","ts":"2026-06-10T01:42:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ccf6919a-21d6-4df7-807a-47342111eaec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}}
{"level":"debug","ts":"2026-06-10T01:42:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ccf6919a-21d6-4df7-807a-47342111eaec","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ccf6919a-21d6-4df7-807a-47342111eaec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"no such key: username"}
{"level":"debug","ts":"2026-06-10T01:42:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ccf6919a-21d6-4df7-807a-47342111eaec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"no such key: groups"}
{"level":"info","ts":"2026-06-10T01:42:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ccf6919a-21d6-4df7-807a-47342111eaec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ccf6919a-21d6-4df7-807a-47342111eaec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ca51006-1e6f-4d52-90f5-9b1bd6e791c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50164","PortSpecifier":{"PortValue":50164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ca51006-1e6f-4d52-90f5-9b1bd6e791c2","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ca51006-1e6f-4d52-90f5-9b1bd6e791c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50164","PortSpecifier":{"PortValue":50164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055728,"nanos":148836260},"http":{"id":"0ca51006-1e6f-4d52-90f5-9b1bd6e791c2","method":"POST","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"0ca51006-1e6f-4d52-90f5-9b1bd6e791c2","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0ca51006-1e6f-4d52-90f5-9b1bd6e791c2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"0ca51006-1e6f-4d52-90f5-9b1bd6e791c2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"not authenticated"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ca51006-1e6f-4d52-90f5-9b1bd6e791c2","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}"}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ca51006-1e6f-4d52-90f5-9b1bd6e791c2","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4148ea17-4bbb-4781-8eef-ae1d1f061b53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:43862","PortSpecifier":{"PortValue":43862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4148ea17-4bbb-4781-8eef-ae1d1f061b53","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4148ea17-4bbb-4781-8eef-ae1d1f061b53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:43862","PortSpecifier":{"PortValue":43862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055728,"nanos":418092482},"http":{"id":"4148ea17-4bbb-4781-8eef-ae1d1f061b53","method":"POST","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4148ea17-4bbb-4781-8eef-ae1d1f061b53","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056028,"groups":["Engineering","Project-Alpha"],"iat":1781055728,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:00512bb6-1eab-9253-f8fb-3a4f926ff3b6","preferred_username":"alice_lead","scope":"profile email","sid":"-F0taijtJip2enx3er5BnPgs","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4148ea17-4bbb-4781-8eef-ae1d1f061b53","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056028,"groups":["Engineering","Project-Alpha"],"iat":1781055728,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:00512bb6-1eab-9253-f8fb-3a4f926ff3b6","preferred_username":"alice_lead","scope":"profile email","sid":"-F0taijtJip2enx3er5BnPgs","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4148ea17-4bbb-4781-8eef-ae1d1f061b53","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4148ea17-4bbb-4781-8eef-ae1d1f061b53","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4148ea17-4bbb-4781-8eef-ae1d1f061b53","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4148ea17-4bbb-4781-8eef-ae1d1f061b53","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4148ea17-4bbb-4781-8eef-ae1d1f061b53","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a7f938d-696e-4fea-aa3f-0be43f37472b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:8030","PortSpecifier":{"PortValue":8030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a7f938d-696e-4fea-aa3f-0be43f37472b","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a7f938d-696e-4fea-aa3f-0be43f37472b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:8030","PortSpecifier":{"PortValue":8030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055728,"nanos":442992940},"http":{"id":"9a7f938d-696e-4fea-aa3f-0be43f37472b","method":"POST","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a7f938d-696e-4fea-aa3f-0be43f37472b","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056028,"groups":["Site-Reliability"],"iat":1781055728,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6b63fc1c-3736-aa97-0b9d-c62046faa56a","preferred_username":"bob_sre","scope":"profile email","sid":"tE3YAPguufyW8nAII2K6vFO7","sub":"ebb1bb39-f650-438b-8176-c6a6903d0f4e","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a7f938d-696e-4fea-aa3f-0be43f37472b","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056028,"groups":["Site-Reliability"],"iat":1781055728,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6b63fc1c-3736-aa97-0b9d-c62046faa56a","preferred_username":"bob_sre","scope":"profile email","sid":"tE3YAPguufyW8nAII2K6vFO7","sub":"ebb1bb39-f650-438b-8176-c6a6903d0f4e","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a7f938d-696e-4fea-aa3f-0be43f37472b","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a7f938d-696e-4fea-aa3f-0be43f37472b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a7f938d-696e-4fea-aa3f-0be43f37472b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a7f938d-696e-4fea-aa3f-0be43f37472b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a7f938d-696e-4fea-aa3f-0be43f37472b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab65dd83-1b44-49db-89ab-23a105b97e7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:53952","PortSpecifier":{"PortValue":53952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab65dd83-1b44-49db-89ab-23a105b97e7d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab65dd83-1b44-49db-89ab-23a105b97e7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:53952","PortSpecifier":{"PortValue":53952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055728,"nanos":586123301},"http":{"id":"ab65dd83-1b44-49db-89ab-23a105b97e7d","method":"POST","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab65dd83-1b44-49db-89ab-23a105b97e7d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056028,"groups":["Engineering","Project-Alpha"],"iat":1781055728,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2b574826-4312-1bcd-2f45-e336eb432b95","preferred_username":"alice_lead","scope":"profile email","sid":"CpfgugEMloS4OfBM8ux1f5Qr","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab65dd83-1b44-49db-89ab-23a105b97e7d","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056028,"groups":["Engineering","Project-Alpha"],"iat":1781055728,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2b574826-4312-1bcd-2f45-e336eb432b95","preferred_username":"alice_lead","scope":"profile email","sid":"CpfgugEMloS4OfBM8ux1f5Qr","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab65dd83-1b44-49db-89ab-23a105b97e7d","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab65dd83-1b44-49db-89ab-23a105b97e7d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab65dd83-1b44-49db-89ab-23a105b97e7d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab65dd83-1b44-49db-89ab-23a105b97e7d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab65dd83-1b44-49db-89ab-23a105b97e7d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae2aaa46-733e-4767-aa4f-c77786fceb3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:16334","PortSpecifier":{"PortValue":16334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae2aaa46-733e-4767-aa4f-c77786fceb3f","method":"DELETE","path":"/maas-api/v1/api-keys/0d864a87-6dac-45dd-9f25-4bf01495a770","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae2aaa46-733e-4767-aa4f-c77786fceb3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:16334","PortSpecifier":{"PortValue":16334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055728,"nanos":608789463},"http":{"id":"ae2aaa46-733e-4767-aa4f-c77786fceb3f","method":"DELETE","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/0d864a87-6dac-45dd-9f25-4bf01495a770",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae2aaa46-733e-4767-aa4f-c77786fceb3f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056028,"groups":["Engineering","Project-Alpha"],"iat":1781055728,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2b574826-4312-1bcd-2f45-e336eb432b95","preferred_username":"alice_lead","scope":"profile email","sid":"CpfgugEMloS4OfBM8ux1f5Qr","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae2aaa46-733e-4767-aa4f-c77786fceb3f","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056028,"groups":["Engineering","Project-Alpha"],"iat":1781055728,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2b574826-4312-1bcd-2f45-e336eb432b95","preferred_username":"alice_lead","scope":"profile email","sid":"CpfgugEMloS4OfBM8ux1f5Qr","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/0d864a87-6dac-45dd-9f25-4bf01495a770",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae2aaa46-733e-4767-aa4f-c77786fceb3f","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae2aaa46-733e-4767-aa4f-c77786fceb3f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae2aaa46-733e-4767-aa4f-c77786fceb3f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae2aaa46-733e-4767-aa4f-c77786fceb3f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae2aaa46-733e-4767-aa4f-c77786fceb3f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17b21aab-e0b2-47bf-bc59-2d59a9b8f7d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:19610","PortSpecifier":{"PortValue":19610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"17b21aab-e0b2-47bf-bc59-2d59a9b8f7d8","method":"DELETE","path":"/maas-api/v1/api-keys/0d864a87-6dac-45dd-9f25-4bf01495a770","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17b21aab-e0b2-47bf-bc59-2d59a9b8f7d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:19610","PortSpecifier":{"PortValue":19610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055728,"nanos":630974996},"http":{"id":"17b21aab-e0b2-47bf-bc59-2d59a9b8f7d8","method":"DELETE","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/0d864a87-6dac-45dd-9f25-4bf01495a770",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"17b21aab-e0b2-47bf-bc59-2d59a9b8f7d8","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056028,"groups":["Engineering","Project-Alpha"],"iat":1781055728,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2b574826-4312-1bcd-2f45-e336eb432b95","preferred_username":"alice_lead","scope":"profile email","sid":"CpfgugEMloS4OfBM8ux1f5Qr","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"17b21aab-e0b2-47bf-bc59-2d59a9b8f7d8","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056028,"groups":["Engineering","Project-Alpha"],"iat":1781055728,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2b574826-4312-1bcd-2f45-e336eb432b95","preferred_username":"alice_lead","scope":"profile email","sid":"CpfgugEMloS4OfBM8ux1f5Qr","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/0d864a87-6dac-45dd-9f25-4bf01495a770",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17b21aab-e0b2-47bf-bc59-2d59a9b8f7d8","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17b21aab-e0b2-47bf-bc59-2d59a9b8f7d8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17b21aab-e0b2-47bf-bc59-2d59a9b8f7d8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17b21aab-e0b2-47bf-bc59-2d59a9b8f7d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17b21aab-e0b2-47bf-bc59-2d59a9b8f7d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13579cbf-224a-484b-87a9-23476345c456","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:43868","PortSpecifier":{"PortValue":43868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13579cbf-224a-484b-87a9-23476345c456","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13579cbf-224a-484b-87a9-23476345c456","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:43868","PortSpecifier":{"PortValue":43868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055728,"nanos":776016458},"http":{"id":"13579cbf-224a-484b-87a9-23476345c456","method":"POST","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13579cbf-224a-484b-87a9-23476345c456","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056028,"groups":["Engineering","Project-Alpha"],"iat":1781055728,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:b88a08cf-26d8-afe3-462c-a11acbbaa054","preferred_username":"alice_lead","scope":"profile email","sid":"orhSYp13FP27lqwnJLb9Bmrk","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13579cbf-224a-484b-87a9-23476345c456","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056028,"groups":["Engineering","Project-Alpha"],"iat":1781055728,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:b88a08cf-26d8-afe3-462c-a11acbbaa054","preferred_username":"alice_lead","scope":"profile email","sid":"orhSYp13FP27lqwnJLb9Bmrk","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13579cbf-224a-484b-87a9-23476345c456","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13579cbf-224a-484b-87a9-23476345c456","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13579cbf-224a-484b-87a9-23476345c456","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13579cbf-224a-484b-87a9-23476345c456","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13579cbf-224a-484b-87a9-23476345c456","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eed3f5d8-6905-485e-9377-d256c5899387","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:16340","PortSpecifier":{"PortValue":16340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eed3f5d8-6905-485e-9377-d256c5899387","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eed3f5d8-6905-485e-9377-d256c5899387","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:16340","PortSpecifier":{"PortValue":16340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055728,"nanos":797653963},"http":{"id":"eed3f5d8-6905-485e-9377-d256c5899387","method":"GET","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eed3f5d8-6905-485e-9377-d256c5899387","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Qmw8AbhjznbuK7rk_yDzaNCCcSGK23xAQpQvXXS7GNqrHgZQt9EbwE4UII6h"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eed3f5d8-6905-485e-9377-d256c5899387","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Qmw8AbhjznbuK7rk_yDzaNCCcSGK23xAQpQvXXS7GNqrHgZQt9EbwE4UII6h\"}"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eed3f5d8-6905-485e-9377-d256c5899387","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eed3f5d8-6905-485e-9377-d256c5899387","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eed3f5d8-6905-485e-9377-d256c5899387","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eed3f5d8-6905-485e-9377-d256c5899387","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eed3f5d8-6905-485e-9377-d256c5899387","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eed3f5d8-6905-485e-9377-d256c5899387","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eed3f5d8-6905-485e-9377-d256c5899387","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c883d59d-568e-4676-b9d5-a4854bd79318","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:48756","PortSpecifier":{"PortValue":48756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c883d59d-568e-4676-b9d5-a4854bd79318","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c883d59d-568e-4676-b9d5-a4854bd79318","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:48756","PortSpecifier":{"PortValue":48756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055728,"nanos":808898577},"http":{"id":"c883d59d-568e-4676-b9d5-a4854bd79318","method":"GET","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c883d59d-568e-4676-b9d5-a4854bd79318","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Qmw8AbhjznbuK7rk_yDzaNCCcSGK23xAQpQvXXS7GNqrHgZQt9EbwE4UII6h"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c883d59d-568e-4676-b9d5-a4854bd79318","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Qmw8AbhjznbuK7rk_yDzaNCCcSGK23xAQpQvXXS7GNqrHgZQt9EbwE4UII6h\"}"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c883d59d-568e-4676-b9d5-a4854bd79318","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c883d59d-568e-4676-b9d5-a4854bd79318","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c883d59d-568e-4676-b9d5-a4854bd79318","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c883d59d-568e-4676-b9d5-a4854bd79318","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-Qmw8AbhjznbuK7rk_yDzaNCCcSGK23xAQpQvXXS7GNqrHgZQt9EbwE4UII6h","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.33","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.28~maas-default-gateway-openshift-default-8559cd5744-n622k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.134.0.33","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"c883d59d-568e-4676-b9d5-a4854bd79318"},"host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","id":"c883d59d-568e-4676-b9d5-a4854bd79318","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":808898577,"seconds":1781055728},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.134.0.33:48756","port":48756}}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c883d59d-568e-4676-b9d5-a4854bd79318","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c883d59d-568e-4676-b9d5-a4854bd79318","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c883d59d-568e-4676-b9d5-a4854bd79318","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c883d59d-568e-4676-b9d5-a4854bd79318","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c883d59d-568e-4676-b9d5-a4854bd79318","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c883d59d-568e-4676-b9d5-a4854bd79318","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"a4733704-186f-4bd8-b0b9-44d315db64df","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c883d59d-568e-4676-b9d5-a4854bd79318","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c883d59d-568e-4676-b9d5-a4854bd79318","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4fda538-6aff-40c1-901a-4926c1522e2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:19616","PortSpecifier":{"PortValue":19616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4fda538-6aff-40c1-901a-4926c1522e2c","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4fda538-6aff-40c1-901a-4926c1522e2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:19616","PortSpecifier":{"PortValue":19616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055728,"nanos":952852450},"http":{"id":"a4fda538-6aff-40c1-901a-4926c1522e2c","method":"POST","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4fda538-6aff-40c1-901a-4926c1522e2c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056028,"groups":["Engineering","Project-Alpha"],"iat":1781055728,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:1f6cfea4-b623-7d45-f42e-669239202a86","preferred_username":"alice_lead","scope":"profile email","sid":"BKCYlug0AlbEirHFQf15BvDG","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4fda538-6aff-40c1-901a-4926c1522e2c","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056028,"groups":["Engineering","Project-Alpha"],"iat":1781055728,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:1f6cfea4-b623-7d45-f42e-669239202a86","preferred_username":"alice_lead","scope":"profile email","sid":"BKCYlug0AlbEirHFQf15BvDG","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4fda538-6aff-40c1-901a-4926c1522e2c","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4fda538-6aff-40c1-901a-4926c1522e2c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4fda538-6aff-40c1-901a-4926c1522e2c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4fda538-6aff-40c1-901a-4926c1522e2c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4fda538-6aff-40c1-901a-4926c1522e2c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86fb2403-b40c-42d2-8c0c-69aa5248ae81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:43870","PortSpecifier":{"PortValue":43870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86fb2403-b40c-42d2-8c0c-69aa5248ae81","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86fb2403-b40c-42d2-8c0c-69aa5248ae81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:43870","PortSpecifier":{"PortValue":43870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055728,"nanos":974169218},"http":{"id":"86fb2403-b40c-42d2-8c0c-69aa5248ae81","method":"GET","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86fb2403-b40c-42d2-8c0c-69aa5248ae81","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1J6cqC2FdKZqJAJnw_33Di7oEaKRJ9gou0CTv3ZOo3WIvGexaeg4iDH8v5TAe"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86fb2403-b40c-42d2-8c0c-69aa5248ae81","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1J6cqC2FdKZqJAJnw_33Di7oEaKRJ9gou0CTv3ZOo3WIvGexaeg4iDH8v5TAe\"}"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86fb2403-b40c-42d2-8c0c-69aa5248ae81","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86fb2403-b40c-42d2-8c0c-69aa5248ae81","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86fb2403-b40c-42d2-8c0c-69aa5248ae81","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86fb2403-b40c-42d2-8c0c-69aa5248ae81","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86fb2403-b40c-42d2-8c0c-69aa5248ae81","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86fb2403-b40c-42d2-8c0c-69aa5248ae81","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86fb2403-b40c-42d2-8c0c-69aa5248ae81","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6ca5865-ae1d-41c3-90ef-064332530c43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:16350","PortSpecifier":{"PortValue":16350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b6ca5865-ae1d-41c3-90ef-064332530c43","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6ca5865-ae1d-41c3-90ef-064332530c43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:16350","PortSpecifier":{"PortValue":16350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055728,"nanos":993914989},"http":{"id":"b6ca5865-ae1d-41c3-90ef-064332530c43","method":"GET","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b6ca5865-ae1d-41c3-90ef-064332530c43","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1J6cqC2FdKZqJAJnw_33Di7oEaKRJ9gou0CTv3ZOo3WIvGexaeg4iDH8v5TAe"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b6ca5865-ae1d-41c3-90ef-064332530c43","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1J6cqC2FdKZqJAJnw_33Di7oEaKRJ9gou0CTv3ZOo3WIvGexaeg4iDH8v5TAe\"}"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b6ca5865-ae1d-41c3-90ef-064332530c43","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b6ca5865-ae1d-41c3-90ef-064332530c43","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6ca5865-ae1d-41c3-90ef-064332530c43","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6ca5865-ae1d-41c3-90ef-064332530c43","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6ca5865-ae1d-41c3-90ef-064332530c43","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6ca5865-ae1d-41c3-90ef-064332530c43","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6ca5865-ae1d-41c3-90ef-064332530c43","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8034bcc8-dfeb-4d9d-988d-25e4825f95a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:48756","PortSpecifier":{"PortValue":48756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8034bcc8-dfeb-4d9d-988d-25e4825f95a1","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8034bcc8-dfeb-4d9d-988d-25e4825f95a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:48756","PortSpecifier":{"PortValue":48756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055728,"nanos":998689209},"http":{"id":"8034bcc8-dfeb-4d9d-988d-25e4825f95a1","method":"GET","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8034bcc8-dfeb-4d9d-988d-25e4825f95a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1J6cqC2FdKZqJAJnw_33Di7oEaKRJ9gou0CTv3ZOo3WIvGexaeg4iDH8v5TAe"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8034bcc8-dfeb-4d9d-988d-25e4825f95a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1J6cqC2FdKZqJAJnw_33Di7oEaKRJ9gou0CTv3ZOo3WIvGexaeg4iDH8v5TAe\"}"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8034bcc8-dfeb-4d9d-988d-25e4825f95a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8034bcc8-dfeb-4d9d-988d-25e4825f95a1","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8034bcc8-dfeb-4d9d-988d-25e4825f95a1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8034bcc8-dfeb-4d9d-988d-25e4825f95a1","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-1J6cqC2FdKZqJAJnw_33Di7oEaKRJ9gou0CTv3ZOo3WIvGexaeg4iDH8v5TAe","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.33","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.28~maas-default-gateway-openshift-default-8559cd5744-n622k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.134.0.33","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"8034bcc8-dfeb-4d9d-988d-25e4825f95a1"},"host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","id":"8034bcc8-dfeb-4d9d-988d-25e4825f95a1","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":998689209,"seconds":1781055728},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.134.0.33:48756","port":48756}}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8034bcc8-dfeb-4d9d-988d-25e4825f95a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8034bcc8-dfeb-4d9d-988d-25e4825f95a1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8034bcc8-dfeb-4d9d-988d-25e4825f95a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8034bcc8-dfeb-4d9d-988d-25e4825f95a1","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8034bcc8-dfeb-4d9d-988d-25e4825f95a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8034bcc8-dfeb-4d9d-988d-25e4825f95a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"7858ef4f-9b20-42f9-97d5-550d00eb5bc0","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8034bcc8-dfeb-4d9d-988d-25e4825f95a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8034bcc8-dfeb-4d9d-988d-25e4825f95a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19dc609d-8b6b-4079-9119-35b09e7f6212","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:19620","PortSpecifier":{"PortValue":19620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19dc609d-8b6b-4079-9119-35b09e7f6212","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19dc609d-8b6b-4079-9119-35b09e7f6212","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:19620","PortSpecifier":{"PortValue":19620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055729,"nanos":139006247},"http":{"id":"19dc609d-8b6b-4079-9119-35b09e7f6212","method":"POST","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19dc609d-8b6b-4079-9119-35b09e7f6212","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056029,"groups":["Engineering","Project-Alpha"],"iat":1781055729,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ac5fdbb8-f8b7-8ffb-b854-3862433ee3af","preferred_username":"alice_lead","scope":"profile email","sid":"OMKqglp8mxWdmrwjBvv_4x7e","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19dc609d-8b6b-4079-9119-35b09e7f6212","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056029,"groups":["Engineering","Project-Alpha"],"iat":1781055729,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ac5fdbb8-f8b7-8ffb-b854-3862433ee3af","preferred_username":"alice_lead","scope":"profile email","sid":"OMKqglp8mxWdmrwjBvv_4x7e","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19dc609d-8b6b-4079-9119-35b09e7f6212","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19dc609d-8b6b-4079-9119-35b09e7f6212","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19dc609d-8b6b-4079-9119-35b09e7f6212","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19dc609d-8b6b-4079-9119-35b09e7f6212","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19dc609d-8b6b-4079-9119-35b09e7f6212","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"407f80a0-d1bd-4909-8ad0-c0ec30d8eda9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50170","PortSpecifier":{"PortValue":50170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"407f80a0-d1bd-4909-8ad0-c0ec30d8eda9","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"407f80a0-d1bd-4909-8ad0-c0ec30d8eda9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50170","PortSpecifier":{"PortValue":50170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055729,"nanos":160942122},"http":{"id":"407f80a0-d1bd-4909-8ad0-c0ec30d8eda9","method":"GET","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"407f80a0-d1bd-4909-8ad0-c0ec30d8eda9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-133gviTrQA2Dxol5Z_O88Wn1EzrMEQseqWqKfIZNwvKSghHa5wpbyUH1t4xW7"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"407f80a0-d1bd-4909-8ad0-c0ec30d8eda9","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-133gviTrQA2Dxol5Z_O88Wn1EzrMEQseqWqKfIZNwvKSghHa5wpbyUH1t4xW7\"}"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"407f80a0-d1bd-4909-8ad0-c0ec30d8eda9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"407f80a0-d1bd-4909-8ad0-c0ec30d8eda9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"407f80a0-d1bd-4909-8ad0-c0ec30d8eda9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"407f80a0-d1bd-4909-8ad0-c0ec30d8eda9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"407f80a0-d1bd-4909-8ad0-c0ec30d8eda9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"407f80a0-d1bd-4909-8ad0-c0ec30d8eda9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"407f80a0-d1bd-4909-8ad0-c0ec30d8eda9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8764687d-12b3-4b38-9f45-6fbe45635e17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:48756","PortSpecifier":{"PortValue":48756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8764687d-12b3-4b38-9f45-6fbe45635e17","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8764687d-12b3-4b38-9f45-6fbe45635e17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:48756","PortSpecifier":{"PortValue":48756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055729,"nanos":165763408},"http":{"id":"8764687d-12b3-4b38-9f45-6fbe45635e17","method":"GET","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8764687d-12b3-4b38-9f45-6fbe45635e17","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-133gviTrQA2Dxol5Z_O88Wn1EzrMEQseqWqKfIZNwvKSghHa5wpbyUH1t4xW7"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8764687d-12b3-4b38-9f45-6fbe45635e17","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-133gviTrQA2Dxol5Z_O88Wn1EzrMEQseqWqKfIZNwvKSghHa5wpbyUH1t4xW7\"}"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8764687d-12b3-4b38-9f45-6fbe45635e17","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8764687d-12b3-4b38-9f45-6fbe45635e17","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8764687d-12b3-4b38-9f45-6fbe45635e17","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8764687d-12b3-4b38-9f45-6fbe45635e17","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-133gviTrQA2Dxol5Z_O88Wn1EzrMEQseqWqKfIZNwvKSghHa5wpbyUH1t4xW7","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.33","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC04NTU5Y2Q1NzQ0LW42MjJrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.134.0.28~maas-default-gateway-openshift-default-8559cd5744-n622k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.134.0.33","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"8764687d-12b3-4b38-9f45-6fbe45635e17"},"host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","id":"8764687d-12b3-4b38-9f45-6fbe45635e17","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":165763408,"seconds":1781055729},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.134.0.33:48756","port":48756}}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8764687d-12b3-4b38-9f45-6fbe45635e17","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8764687d-12b3-4b38-9f45-6fbe45635e17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8764687d-12b3-4b38-9f45-6fbe45635e17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8764687d-12b3-4b38-9f45-6fbe45635e17","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8764687d-12b3-4b38-9f45-6fbe45635e17","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8764687d-12b3-4b38-9f45-6fbe45635e17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"d96b574c-422b-4d52-9340-7721f420fc30","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8764687d-12b3-4b38-9f45-6fbe45635e17","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8764687d-12b3-4b38-9f45-6fbe45635e17","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e541894-98d4-437f-a08d-b74a8b977a9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:8034","PortSpecifier":{"PortValue":8034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e541894-98d4-437f-a08d-b74a8b977a9d","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e541894-98d4-437f-a08d-b74a8b977a9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:8034","PortSpecifier":{"PortValue":8034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055729,"nanos":188623229},"http":{"id":"3e541894-98d4-437f-a08d-b74a8b977a9d","method":"GET","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e541894-98d4-437f-a08d-b74a8b977a9d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-133gviTrQA2Dxol5Z_O88Wn1EzrMEQseqWqKfIZNwvKSghHa5wpbyUH1t4xW7"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3e541894-98d4-437f-a08d-b74a8b977a9d","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-133gviTrQA2Dxol5Z_O88Wn1EzrMEQseqWqKfIZNwvKSghHa5wpbyUH1t4xW7\"}"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3e541894-98d4-437f-a08d-b74a8b977a9d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e541894-98d4-437f-a08d-b74a8b977a9d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e541894-98d4-437f-a08d-b74a8b977a9d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e541894-98d4-437f-a08d-b74a8b977a9d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e541894-98d4-437f-a08d-b74a8b977a9d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e541894-98d4-437f-a08d-b74a8b977a9d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e541894-98d4-437f-a08d-b74a8b977a9d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62695ea9-ed57-4109-9ae1-f8bd0972d82d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:48756","PortSpecifier":{"PortValue":48756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62695ea9-ed57-4109-9ae1-f8bd0972d82d","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62695ea9-ed57-4109-9ae1-f8bd0972d82d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:48756","PortSpecifier":{"PortValue":48756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055729,"nanos":193235727},"http":{"id":"62695ea9-ed57-4109-9ae1-f8bd0972d82d","method":"GET","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62695ea9-ed57-4109-9ae1-f8bd0972d82d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-133gviTrQA2Dxol5Z_O88Wn1EzrMEQseqWqKfIZNwvKSghHa5wpbyUH1t4xW7"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62695ea9-ed57-4109-9ae1-f8bd0972d82d","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-133gviTrQA2Dxol5Z_O88Wn1EzrMEQseqWqKfIZNwvKSghHa5wpbyUH1t4xW7\"}"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62695ea9-ed57-4109-9ae1-f8bd0972d82d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62695ea9-ed57-4109-9ae1-f8bd0972d82d","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62695ea9-ed57-4109-9ae1-f8bd0972d82d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62695ea9-ed57-4109-9ae1-f8bd0972d82d","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-133gviTrQA2Dxol5Z_O88Wn1EzrMEQseqWqKfIZNwvKSghHa5wpbyUH1t4xW7","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.33","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.28~maas-default-gateway-openshift-default-8559cd5744-n622k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.134.0.33","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"62695ea9-ed57-4109-9ae1-f8bd0972d82d"},"host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","id":"62695ea9-ed57-4109-9ae1-f8bd0972d82d","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":193235727,"seconds":1781055729},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.134.0.33:48756","port":48756}}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62695ea9-ed57-4109-9ae1-f8bd0972d82d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62695ea9-ed57-4109-9ae1-f8bd0972d82d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62695ea9-ed57-4109-9ae1-f8bd0972d82d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62695ea9-ed57-4109-9ae1-f8bd0972d82d","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62695ea9-ed57-4109-9ae1-f8bd0972d82d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62695ea9-ed57-4109-9ae1-f8bd0972d82d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"d96b574c-422b-4d52-9340-7721f420fc30","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62695ea9-ed57-4109-9ae1-f8bd0972d82d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62695ea9-ed57-4109-9ae1-f8bd0972d82d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d86bdbb-df9b-4343-977d-ed003de67f87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:43882","PortSpecifier":{"PortValue":43882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d86bdbb-df9b-4343-977d-ed003de67f87","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d86bdbb-df9b-4343-977d-ed003de67f87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:43882","PortSpecifier":{"PortValue":43882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781055729,"nanos":333744350},"http":{"id":"4d86bdbb-df9b-4343-977d-ed003de67f87","method":"POST","headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d86bdbb-df9b-4343-977d-ed003de67f87","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056029,"groups":["Engineering","Project-Alpha"],"iat":1781055729,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:d760f86f-8c31-525d-30c3-497947d55277","preferred_username":"alice_lead","scope":"profile email","sid":"_WRfAIV3XbWPxwf3_hgynsIP","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d86bdbb-df9b-4343-977d-ed003de67f87","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781056029,"groups":["Engineering","Project-Alpha"],"iat":1781055729,"iss":"https://keycloak.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:d760f86f-8c31-525d-30c3-497947d55277","preferred_username":"alice_lead","scope":"profile email","sid":"_WRfAIV3XbWPxwf3_hgynsIP","sub":"44fa3ed6-5d2e-4ae6-8dec-c2617c5187a9","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cdd5bcf3-ab76-4975-82a0-986799a1ba17.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d86bdbb-df9b-4343-977d-ed003de67f87","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d86bdbb-df9b-4343-977d-ed003de67f87","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d86bdbb-df9b-4343-977d-ed003de67f87","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d86bdbb-df9b-4343-977d-ed003de67f87","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-10T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d86bdbb-df9b-4343-977d-ed003de67f87","authorized":true,"response":"OK"}