{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016"}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016"}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-05T16:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"error","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d4297ca-407c-4a8e-b8ba-da38c98faae6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:7924","PortSpecifier":{"PortValue":7924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d4297ca-407c-4a8e-b8ba-da38c98faae6","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d4297ca-407c-4a8e-b8ba-da38c98faae6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:7924","PortSpecifier":{"PortValue":7924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780675939,"nanos":486695454},"http":{"id":"4d4297ca-407c-4a8e-b8ba-da38c98faae6","method":"POST","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"4d4297ca-407c-4a8e-b8ba-da38c98faae6","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4d4297ca-407c-4a8e-b8ba-da38c98faae6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d4297ca-407c-4a8e-b8ba-da38c98faae6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"65cd0342-928d-4600-bd2b-557fcbc8ea1d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9e2b71c8-f08d-4cd0-96e5-9c91708d0e0c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/052146c382ca"]}}
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d4297ca-407c-4a8e-b8ba-da38c98faae6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/052146c382ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9e2b71c8-f08d-4cd0-96e5-9c91708d0e0c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"65cd0342-928d-4600-bd2b-557fcbc8ea1d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d4297ca-407c-4a8e-b8ba-da38c98faae6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d4297ca-407c-4a8e-b8ba-da38c98faae6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d4297ca-407c-4a8e-b8ba-da38c98faae6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d4297ca-407c-4a8e-b8ba-da38c98faae6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6571841-acba-4604-bea9-8b764face1ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:53236","PortSpecifier":{"PortValue":53236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6571841-acba-4604-bea9-8b764face1ec","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6571841-acba-4604-bea9-8b764face1ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:53236","PortSpecifier":{"PortValue":53236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780675939,"nanos":862772405},"http":{"id":"d6571841-acba-4604-bea9-8b764face1ec","method":"POST","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"info","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6571841-acba-4604-bea9-8b764face1ec","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}}
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6571841-acba-4604-bea9-8b764face1ec","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""}]}}
{"level":"info","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"055cc823-9340-474a-be3c-ed0c8013e829","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:5520","PortSpecifier":{"PortValue":5520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"055cc823-9340-474a-be3c-ed0c8013e829","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"055cc823-9340-474a-be3c-ed0c8013e829","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:5520","PortSpecifier":{"PortValue":5520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780675939,"nanos":891436574},"http":{"id":"055cc823-9340-474a-be3c-ed0c8013e829","method":"POST","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"httpbin.org:443/*","x-envoy-external-address":"100.64.0.2","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-gateway-model-name":"e2e-external-model","x-request-id":"055cc823-9340-474a-be3c-ed0c8013e829"},"path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"},"metadata_context":{}}}
{"level":"info","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"055cc823-9340-474a-be3c-ed0c8013e829","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}}
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"055cc823-9340-474a-be3c-ed0c8013e829","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""}]}}
{"level":"info","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aca618c1-0de8-4b21-bf94-51972478c85d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:11310","PortSpecifier":{"PortValue":11310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aca618c1-0de8-4b21-bf94-51972478c85d","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aca618c1-0de8-4b21-bf94-51972478c85d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:11310","PortSpecifier":{"PortValue":11310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780675939,"nanos":912104135},"http":{"id":"aca618c1-0de8-4b21-bf94-51972478c85d","method":"POST","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aca618c1-0de8-4b21-bf94-51972478c85d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Q71wybLIINI1ggi7_X7XCoGzN5KWrVpvSORtDWKFrM8TVY6mfqtUXMk8dn2s"}
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aca618c1-0de8-4b21-bf94-51972478c85d","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Q71wybLIINI1ggi7_X7XCoGzN5KWrVpvSORtDWKFrM8TVY6mfqtUXMk8dn2s\"}"}
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aca618c1-0de8-4b21-bf94-51972478c85d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aca618c1-0de8-4b21-bf94-51972478c85d","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-external-model\",\"requestedSubscription\":\"e2e-external-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aca618c1-0de8-4b21-bf94-51972478c85d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-external-model","source":"external","token_rate_limits":[{"limit":10000,"window":"1h"}]}],"name":"e2e-external-subscription","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aca618c1-0de8-4b21-bf94-51972478c85d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aca618c1-0de8-4b21-bf94-51972478c85d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aca618c1-0de8-4b21-bf94-51972478c85d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aca618c1-0de8-4b21-bf94-51972478c85d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aca618c1-0de8-4b21-bf94-51972478c85d","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aca618c1-0de8-4b21-bf94-51972478c85d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-external-subscription"}
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aca618c1-0de8-4b21-bf94-51972478c85d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ae9e8b96-003c-40cf-b537-a8b3a473d023","selected_subscription":"e2e-external-subscription","selected_subscription_key":"models-as-a-service/e2e-external-subscription@llm/e2e-external-model","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"e2e-external-model","source":"external","token_rate_limits":[{"limit":10000,"window":"1h"}]}],"name":"e2e-external-subscription","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aca618c1-0de8-4b21-bf94-51972478c85d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:12:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aca618c1-0de8-4b21-bf94-51972478c85d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98"}
{"level":"debug","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-05T16:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-05T16:12:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98"}
{"level":"debug","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-05T16:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-05T16:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"}
{"level":"info","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98"}
{"level":"info","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-05T16:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-05T16:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4"}
{"level":"info","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"}
{"level":"debug","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-05T16:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-05T16:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4"}
{"level":"debug","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"}
{"level":"debug","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-05T16:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-05T16:12:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-05T16:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-05T16:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"}
{"level":"info","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-05T16:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-05T16:12:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"}
{"level":"info","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"}
{"level":"debug","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-05T16:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-05T16:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"}
{"level":"debug","ts":"2026-06-05T16:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-05T16:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"}
{"level":"info","ts":"2026-06-05T16:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"}
{"level":"info","ts":"2026-06-05T16:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98"}
{"level":"info","ts":"2026-06-05T16:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4"}
{"level":"info","ts":"2026-06-05T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52"}
{"level":"info","ts":"2026-06-05T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-05T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016"}
{"level":"info","ts":"2026-06-05T16:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6460159-881b-4d75-bd13-5e7548f605f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28086","PortSpecifier":{"PortValue":28086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6460159-881b-4d75-bd13-5e7548f605f9","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6460159-881b-4d75-bd13-5e7548f605f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28086","PortSpecifier":{"PortValue":28086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676005,"nanos":395683061},"http":{"id":"f6460159-881b-4d75-bd13-5e7548f605f9","method":"POST","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6460159-881b-4d75-bd13-5e7548f605f9","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676305,"groups":["Engineering","Project-Alpha"],"iat":1780676005,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:dc6408d7-9874-69d2-9efa-b4f059b11298","preferred_username":"alice_lead","scope":"email profile","sid":"RuFDuryHjNi5zAubj7EkSooD","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6460159-881b-4d75-bd13-5e7548f605f9","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676305,"groups":["Engineering","Project-Alpha"],"iat":1780676005,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:dc6408d7-9874-69d2-9efa-b4f059b11298","preferred_username":"alice_lead","scope":"email profile","sid":"RuFDuryHjNi5zAubj7EkSooD","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6460159-881b-4d75-bd13-5e7548f605f9","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6460159-881b-4d75-bd13-5e7548f605f9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6460159-881b-4d75-bd13-5e7548f605f9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6460159-881b-4d75-bd13-5e7548f605f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6460159-881b-4d75-bd13-5e7548f605f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"082c8c46-3728-4fd7-b20f-ebef0085c12e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:21028","PortSpecifier":{"PortValue":21028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"082c8c46-3728-4fd7-b20f-ebef0085c12e","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"082c8c46-3728-4fd7-b20f-ebef0085c12e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:21028","PortSpecifier":{"PortValue":21028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676005,"nanos":509414772},"http":{"id":"082c8c46-3728-4fd7-b20f-ebef0085c12e","method":"POST","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"082c8c46-3728-4fd7-b20f-ebef0085c12e","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"082c8c46-3728-4fd7-b20f-ebef0085c12e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"082c8c46-3728-4fd7-b20f-ebef0085c12e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"not authenticated"}
{"level":"info","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"082c8c46-3728-4fd7-b20f-ebef0085c12e","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}"}}
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"082c8c46-3728-4fd7-b20f-ebef0085c12e","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a0a4f02-9772-4418-a4d4-7f3fc4a61bcd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:32472","PortSpecifier":{"PortValue":32472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a0a4f02-9772-4418-a4d4-7f3fc4a61bcd","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a0a4f02-9772-4418-a4d4-7f3fc4a61bcd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:32472","PortSpecifier":{"PortValue":32472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676005,"nanos":566713201},"http":{"id":"8a0a4f02-9772-4418-a4d4-7f3fc4a61bcd","method":"POST","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~maas-default-gateway-openshift-default-687ff6996-6q92n.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-request-id":"8a0a4f02-9772-4418-a4d4-7f3fc4a61bcd"},"path":"/maas-api/v1/api-keys","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"metadata_context":{}}}
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"8a0a4f02-9772-4418-a4d4-7f3fc4a61bcd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"credential not found"}
{"level":"info","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a0a4f02-9772-4418-a4d4-7f3fc4a61bcd","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"openshift-identities\":\"credential not found\"}"}}
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a0a4f02-9772-4418-a4d4-7f3fc4a61bcd","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"openshift-identities\":\"credential not found\"}","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4b3db76-997f-4f1e-a192-64a4c80adbce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:16734","PortSpecifier":{"PortValue":16734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4b3db76-997f-4f1e-a192-64a4c80adbce","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4b3db76-997f-4f1e-a192-64a4c80adbce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:16734","PortSpecifier":{"PortValue":16734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676005,"nanos":589012414},"http":{"id":"c4b3db76-997f-4f1e-a192-64a4c80adbce","method":"POST","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~maas-default-gateway-openshift-default-687ff6996-6q92n.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-request-id":"c4b3db76-997f-4f1e-a192-64a4c80adbce"},"path":"/maas-api/v1/api-keys","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"metadata_context":{}}}
{"level":"info","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4b3db76-997f-4f1e-a192-64a4c80adbce","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}"}}
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4b3db76-997f-4f1e-a192-64a4c80adbce","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c93b23ed-0ccb-4a1c-9093-d0391c3ec29e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:19454","PortSpecifier":{"PortValue":19454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c93b23ed-0ccb-4a1c-9093-d0391c3ec29e","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c93b23ed-0ccb-4a1c-9093-d0391c3ec29e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:19454","PortSpecifier":{"PortValue":19454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676005,"nanos":936800648},"http":{"id":"c93b23ed-0ccb-4a1c-9093-d0391c3ec29e","method":"POST","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c93b23ed-0ccb-4a1c-9093-d0391c3ec29e","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676305,"groups":["Site-Reliability"],"iat":1780676005,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:dfb18315-c007-f5df-facf-87d182679c60","preferred_username":"bob_sre","scope":"email profile","sid":"7gFrZjXaYRMMIoVXlTQna06L","sub":"a1d93851-7a9b-4689-a78a-d330f6df50ce","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c93b23ed-0ccb-4a1c-9093-d0391c3ec29e","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676305,"groups":["Site-Reliability"],"iat":1780676005,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:dfb18315-c007-f5df-facf-87d182679c60","preferred_username":"bob_sre","scope":"email profile","sid":"7gFrZjXaYRMMIoVXlTQna06L","sub":"a1d93851-7a9b-4689-a78a-d330f6df50ce","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c93b23ed-0ccb-4a1c-9093-d0391c3ec29e","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c93b23ed-0ccb-4a1c-9093-d0391c3ec29e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"}
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c93b23ed-0ccb-4a1c-9093-d0391c3ec29e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"}
{"level":"info","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c93b23ed-0ccb-4a1c-9093-d0391c3ec29e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c93b23ed-0ccb-4a1c-9093-d0391c3ec29e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eef3a06e-4880-498a-8488-05d7ac5b7df0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28088","PortSpecifier":{"PortValue":28088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eef3a06e-4880-498a-8488-05d7ac5b7df0","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eef3a06e-4880-498a-8488-05d7ac5b7df0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28088","PortSpecifier":{"PortValue":28088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676006,"nanos":149302833},"http":{"id":"eef3a06e-4880-498a-8488-05d7ac5b7df0","method":"POST","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eef3a06e-4880-498a-8488-05d7ac5b7df0","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676306,"groups":["Engineering","Project-Alpha"],"iat":1780676006,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:79852ad5-07bd-cad0-3179-8f2d9ad2686d","preferred_username":"alice_lead","scope":"email profile","sid":"--NyDZ-Ya4902h-z_q6Lupcn","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eef3a06e-4880-498a-8488-05d7ac5b7df0","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676306,"groups":["Engineering","Project-Alpha"],"iat":1780676006,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:79852ad5-07bd-cad0-3179-8f2d9ad2686d","preferred_username":"alice_lead","scope":"email profile","sid":"--NyDZ-Ya4902h-z_q6Lupcn","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eef3a06e-4880-498a-8488-05d7ac5b7df0","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eef3a06e-4880-498a-8488-05d7ac5b7df0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eef3a06e-4880-498a-8488-05d7ac5b7df0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eef3a06e-4880-498a-8488-05d7ac5b7df0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eef3a06e-4880-498a-8488-05d7ac5b7df0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d240c8e-6e32-4caf-8d9e-ba9306256650","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:32482","PortSpecifier":{"PortValue":32482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d240c8e-6e32-4caf-8d9e-ba9306256650","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d240c8e-6e32-4caf-8d9e-ba9306256650","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:32482","PortSpecifier":{"PortValue":32482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676006,"nanos":174100481},"http":{"id":"0d240c8e-6e32-4caf-8d9e-ba9306256650","method":"GET","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d240c8e-6e32-4caf-8d9e-ba9306256650","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3o5AL3ztmIaNkElY_BYFMw0mV0LHjj04PDMR90RZEHGu8dGJuaDPi514RxGB"}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d240c8e-6e32-4caf-8d9e-ba9306256650","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3o5AL3ztmIaNkElY_BYFMw0mV0LHjj04PDMR90RZEHGu8dGJuaDPi514RxGB\"}"}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d240c8e-6e32-4caf-8d9e-ba9306256650","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d240c8e-6e32-4caf-8d9e-ba9306256650","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d240c8e-6e32-4caf-8d9e-ba9306256650","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d240c8e-6e32-4caf-8d9e-ba9306256650","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d240c8e-6e32-4caf-8d9e-ba9306256650","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d240c8e-6e32-4caf-8d9e-ba9306256650","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d240c8e-6e32-4caf-8d9e-ba9306256650","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cbf7d1f-bd0f-4659-b819-7acef50ad854","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.30:48068","PortSpecifier":{"PortValue":48068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5cbf7d1f-bd0f-4659-b819-7acef50ad854","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cbf7d1f-bd0f-4659-b819-7acef50ad854","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.30:48068","PortSpecifier":{"PortValue":48068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676006,"nanos":191054959},"http":{"id":"5cbf7d1f-bd0f-4659-b819-7acef50ad854","method":"GET","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5cbf7d1f-bd0f-4659-b819-7acef50ad854","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3o5AL3ztmIaNkElY_BYFMw0mV0LHjj04PDMR90RZEHGu8dGJuaDPi514RxGB"}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5cbf7d1f-bd0f-4659-b819-7acef50ad854","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3o5AL3ztmIaNkElY_BYFMw0mV0LHjj04PDMR90RZEHGu8dGJuaDPi514RxGB\"}"}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5cbf7d1f-bd0f-4659-b819-7acef50ad854","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5cbf7d1f-bd0f-4659-b819-7acef50ad854","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5cbf7d1f-bd0f-4659-b819-7acef50ad854","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5cbf7d1f-bd0f-4659-b819-7acef50ad854","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"4e93f1986841c16506ee726a8192ec71d2a8bafa10275979a4129ddd337542b4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-3o5AL3ztmIaNkElY_BYFMw0mV0LHjj04PDMR90RZEHGu8dGJuaDPi514RxGB","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.30","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~maas-default-gateway-openshift-default-687ff6996-6q92n.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.132.0.30","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"5cbf7d1f-bd0f-4659-b819-7acef50ad854"},"host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","id":"5cbf7d1f-bd0f-4659-b819-7acef50ad854","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":191054959,"seconds":1780676006},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.132.0.30:48068","port":48068}}}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cbf7d1f-bd0f-4659-b819-7acef50ad854","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cbf7d1f-bd0f-4659-b819-7acef50ad854","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cbf7d1f-bd0f-4659-b819-7acef50ad854","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cbf7d1f-bd0f-4659-b819-7acef50ad854","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cbf7d1f-bd0f-4659-b819-7acef50ad854","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cbf7d1f-bd0f-4659-b819-7acef50ad854","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"36e448c0-4b6d-4967-90a0-6b0ebb0de220","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cbf7d1f-bd0f-4659-b819-7acef50ad854","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cbf7d1f-bd0f-4659-b819-7acef50ad854","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4caecefc-65fa-4713-8970-3ceca44cde1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:16738","PortSpecifier":{"PortValue":16738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4caecefc-65fa-4713-8970-3ceca44cde1e","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4caecefc-65fa-4713-8970-3ceca44cde1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:16738","PortSpecifier":{"PortValue":16738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676006,"nanos":217068580},"http":{"id":"4caecefc-65fa-4713-8970-3ceca44cde1e","method":"POST","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4caecefc-65fa-4713-8970-3ceca44cde1e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3o5AL3ztmIaNkElY_BYFMw0mV0LHjj04PDMR90RZEHGu8dGJuaDPi514RxGB"}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4caecefc-65fa-4713-8970-3ceca44cde1e","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3o5AL3ztmIaNkElY_BYFMw0mV0LHjj04PDMR90RZEHGu8dGJuaDPi514RxGB\"}"}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4caecefc-65fa-4713-8970-3ceca44cde1e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4caecefc-65fa-4713-8970-3ceca44cde1e","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4caecefc-65fa-4713-8970-3ceca44cde1e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4caecefc-65fa-4713-8970-3ceca44cde1e","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"5aa0fd746a1cbe4557cf771f0b5f5c4020da5a6444c58d701a6d039232d7faab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4caecefc-65fa-4713-8970-3ceca44cde1e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4caecefc-65fa-4713-8970-3ceca44cde1e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4caecefc-65fa-4713-8970-3ceca44cde1e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4caecefc-65fa-4713-8970-3ceca44cde1e","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4caecefc-65fa-4713-8970-3ceca44cde1e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4caecefc-65fa-4713-8970-3ceca44cde1e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"36e448c0-4b6d-4967-90a0-6b0ebb0de220","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4caecefc-65fa-4713-8970-3ceca44cde1e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4caecefc-65fa-4713-8970-3ceca44cde1e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f313dc6d-9a68-4880-ade0-978939ba552a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:13968","PortSpecifier":{"PortValue":13968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f313dc6d-9a68-4880-ade0-978939ba552a","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f313dc6d-9a68-4880-ade0-978939ba552a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:13968","PortSpecifier":{"PortValue":13968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676006,"nanos":307797104},"http":{"id":"f313dc6d-9a68-4880-ade0-978939ba552a","method":"POST","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f313dc6d-9a68-4880-ade0-978939ba552a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676306,"groups":["Engineering","Project-Alpha"],"iat":1780676006,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7ea3a014-354a-9aed-5eeb-6a7a4db8a497","preferred_username":"alice_lead","scope":"email profile","sid":"t-niBio9DH1U9KWndVO5SEU0","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f313dc6d-9a68-4880-ade0-978939ba552a","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676306,"groups":["Engineering","Project-Alpha"],"iat":1780676006,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7ea3a014-354a-9aed-5eeb-6a7a4db8a497","preferred_username":"alice_lead","scope":"email profile","sid":"t-niBio9DH1U9KWndVO5SEU0","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f313dc6d-9a68-4880-ade0-978939ba552a","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f313dc6d-9a68-4880-ade0-978939ba552a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f313dc6d-9a68-4880-ade0-978939ba552a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f313dc6d-9a68-4880-ade0-978939ba552a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f313dc6d-9a68-4880-ade0-978939ba552a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2da51ede-9383-46cf-8d51-883b388646c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28096","PortSpecifier":{"PortValue":28096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2da51ede-9383-46cf-8d51-883b388646c8","method":"DELETE","path":"/maas-api/v1/api-keys/abe36e34-63f4-450e-848e-806b2052eb2d","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2da51ede-9383-46cf-8d51-883b388646c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28096","PortSpecifier":{"PortValue":28096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676006,"nanos":332268635},"http":{"id":"2da51ede-9383-46cf-8d51-883b388646c8","method":"DELETE","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/abe36e34-63f4-450e-848e-806b2052eb2d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2da51ede-9383-46cf-8d51-883b388646c8","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676306,"groups":["Engineering","Project-Alpha"],"iat":1780676006,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7ea3a014-354a-9aed-5eeb-6a7a4db8a497","preferred_username":"alice_lead","scope":"email profile","sid":"t-niBio9DH1U9KWndVO5SEU0","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2da51ede-9383-46cf-8d51-883b388646c8","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676306,"groups":["Engineering","Project-Alpha"],"iat":1780676006,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7ea3a014-354a-9aed-5eeb-6a7a4db8a497","preferred_username":"alice_lead","scope":"email profile","sid":"t-niBio9DH1U9KWndVO5SEU0","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/abe36e34-63f4-450e-848e-806b2052eb2d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2da51ede-9383-46cf-8d51-883b388646c8","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2da51ede-9383-46cf-8d51-883b388646c8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2da51ede-9383-46cf-8d51-883b388646c8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2da51ede-9383-46cf-8d51-883b388646c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2da51ede-9383-46cf-8d51-883b388646c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32b3a2e8-b0f1-41d4-b1ff-eab085ec3d30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:30248","PortSpecifier":{"PortValue":30248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32b3a2e8-b0f1-41d4-b1ff-eab085ec3d30","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32b3a2e8-b0f1-41d4-b1ff-eab085ec3d30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:30248","PortSpecifier":{"PortValue":30248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676009,"nanos":361115954},"http":{"id":"32b3a2e8-b0f1-41d4-b1ff-eab085ec3d30","method":"GET","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32b3a2e8-b0f1-41d4-b1ff-eab085ec3d30","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KY2Zzg85X816N0uu_Yx6S0pMqFplqMbHxZh4tXbDY9T27Vk4wde1udzC7i48"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32b3a2e8-b0f1-41d4-b1ff-eab085ec3d30","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KY2Zzg85X816N0uu_Yx6S0pMqFplqMbHxZh4tXbDY9T27Vk4wde1udzC7i48\"}"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32b3a2e8-b0f1-41d4-b1ff-eab085ec3d30","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32b3a2e8-b0f1-41d4-b1ff-eab085ec3d30","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"32b3a2e8-b0f1-41d4-b1ff-eab085ec3d30","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"32b3a2e8-b0f1-41d4-b1ff-eab085ec3d30","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"no such key: username"}
{"level":"info","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32b3a2e8-b0f1-41d4-b1ff-eab085ec3d30","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32b3a2e8-b0f1-41d4-b1ff-eab085ec3d30","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e03c775-fdbf-486b-94bc-738132d709fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:32496","PortSpecifier":{"PortValue":32496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e03c775-fdbf-486b-94bc-738132d709fd","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e03c775-fdbf-486b-94bc-738132d709fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:32496","PortSpecifier":{"PortValue":32496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676009,"nanos":499333641},"http":{"id":"1e03c775-fdbf-486b-94bc-738132d709fd","method":"POST","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"1e03c775-fdbf-486b-94bc-738132d709fd","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1e03c775-fdbf-486b-94bc-738132d709fd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"1e03c775-fdbf-486b-94bc-738132d709fd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"not authenticated"}
{"level":"info","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e03c775-fdbf-486b-94bc-738132d709fd","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}"}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e03c775-fdbf-486b-94bc-738132d709fd","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35e703b5-0ff8-4f54-ae85-d0e2f31f552d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:59236","PortSpecifier":{"PortValue":59236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35e703b5-0ff8-4f54-ae85-d0e2f31f552d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35e703b5-0ff8-4f54-ae85-d0e2f31f552d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:59236","PortSpecifier":{"PortValue":59236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676009,"nanos":663295277},"http":{"id":"35e703b5-0ff8-4f54-ae85-d0e2f31f552d","method":"POST","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35e703b5-0ff8-4f54-ae85-d0e2f31f552d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676309,"groups":["Engineering","Project-Alpha"],"iat":1780676009,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:9120e57d-6b67-f48e-9930-afcf2ea0d623","preferred_username":"alice_lead","scope":"email profile","sid":"HlGDoxBrte5Wlv5svYbK1Mm0","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35e703b5-0ff8-4f54-ae85-d0e2f31f552d","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676309,"groups":["Engineering","Project-Alpha"],"iat":1780676009,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:9120e57d-6b67-f48e-9930-afcf2ea0d623","preferred_username":"alice_lead","scope":"email profile","sid":"HlGDoxBrte5Wlv5svYbK1Mm0","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35e703b5-0ff8-4f54-ae85-d0e2f31f552d","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35e703b5-0ff8-4f54-ae85-d0e2f31f552d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35e703b5-0ff8-4f54-ae85-d0e2f31f552d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35e703b5-0ff8-4f54-ae85-d0e2f31f552d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35e703b5-0ff8-4f54-ae85-d0e2f31f552d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7b31f49-4ad7-4d54-8267-e8e32f9f7eb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:16746","PortSpecifier":{"PortValue":16746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7b31f49-4ad7-4d54-8267-e8e32f9f7eb6","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7b31f49-4ad7-4d54-8267-e8e32f9f7eb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:16746","PortSpecifier":{"PortValue":16746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676009,"nanos":691228745},"http":{"id":"d7b31f49-4ad7-4d54-8267-e8e32f9f7eb6","method":"POST","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7b31f49-4ad7-4d54-8267-e8e32f9f7eb6","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676309,"groups":["Site-Reliability"],"iat":1780676009,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6267cc5c-70d5-f293-c6e8-554678e42c7a","preferred_username":"bob_sre","scope":"email profile","sid":"fjhF5fzgfQqpIP3Q4Zoy9s6k","sub":"a1d93851-7a9b-4689-a78a-d330f6df50ce","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7b31f49-4ad7-4d54-8267-e8e32f9f7eb6","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676309,"groups":["Site-Reliability"],"iat":1780676009,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6267cc5c-70d5-f293-c6e8-554678e42c7a","preferred_username":"bob_sre","scope":"email profile","sid":"fjhF5fzgfQqpIP3Q4Zoy9s6k","sub":"a1d93851-7a9b-4689-a78a-d330f6df50ce","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7b31f49-4ad7-4d54-8267-e8e32f9f7eb6","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7b31f49-4ad7-4d54-8267-e8e32f9f7eb6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7b31f49-4ad7-4d54-8267-e8e32f9f7eb6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"}
{"level":"info","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7b31f49-4ad7-4d54-8267-e8e32f9f7eb6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7b31f49-4ad7-4d54-8267-e8e32f9f7eb6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad99d68d-8535-4bbb-b8fd-cae3595970f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:23570","PortSpecifier":{"PortValue":23570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad99d68d-8535-4bbb-b8fd-cae3595970f8","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad99d68d-8535-4bbb-b8fd-cae3595970f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:23570","PortSpecifier":{"PortValue":23570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676009,"nanos":778996019},"http":{"id":"ad99d68d-8535-4bbb-b8fd-cae3595970f8","method":"POST","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad99d68d-8535-4bbb-b8fd-cae3595970f8","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676309,"groups":["Engineering","Project-Alpha"],"iat":1780676009,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:dfa688ac-6c9f-166e-a71b-a5ecece6e04c","preferred_username":"alice_lead","scope":"email profile","sid":"zcjj_MWFyKWHfZxOFKBgkk7I","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad99d68d-8535-4bbb-b8fd-cae3595970f8","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676309,"groups":["Engineering","Project-Alpha"],"iat":1780676009,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:dfa688ac-6c9f-166e-a71b-a5ecece6e04c","preferred_username":"alice_lead","scope":"email profile","sid":"zcjj_MWFyKWHfZxOFKBgkk7I","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad99d68d-8535-4bbb-b8fd-cae3595970f8","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad99d68d-8535-4bbb-b8fd-cae3595970f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad99d68d-8535-4bbb-b8fd-cae3595970f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad99d68d-8535-4bbb-b8fd-cae3595970f8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad99d68d-8535-4bbb-b8fd-cae3595970f8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b536e71d-dcd3-4d20-a10a-9589a48ab29a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28112","PortSpecifier":{"PortValue":28112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b536e71d-dcd3-4d20-a10a-9589a48ab29a","method":"DELETE","path":"/maas-api/v1/api-keys/b47e124e-a362-4287-880e-da2f0f809478","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b536e71d-dcd3-4d20-a10a-9589a48ab29a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28112","PortSpecifier":{"PortValue":28112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676009,"nanos":802565668},"http":{"id":"b536e71d-dcd3-4d20-a10a-9589a48ab29a","method":"DELETE","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/b47e124e-a362-4287-880e-da2f0f809478",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b536e71d-dcd3-4d20-a10a-9589a48ab29a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676309,"groups":["Engineering","Project-Alpha"],"iat":1780676009,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:dfa688ac-6c9f-166e-a71b-a5ecece6e04c","preferred_username":"alice_lead","scope":"email profile","sid":"zcjj_MWFyKWHfZxOFKBgkk7I","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b536e71d-dcd3-4d20-a10a-9589a48ab29a","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676309,"groups":["Engineering","Project-Alpha"],"iat":1780676009,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:dfa688ac-6c9f-166e-a71b-a5ecece6e04c","preferred_username":"alice_lead","scope":"email profile","sid":"zcjj_MWFyKWHfZxOFKBgkk7I","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/b47e124e-a362-4287-880e-da2f0f809478",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b536e71d-dcd3-4d20-a10a-9589a48ab29a","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b536e71d-dcd3-4d20-a10a-9589a48ab29a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b536e71d-dcd3-4d20-a10a-9589a48ab29a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b536e71d-dcd3-4d20-a10a-9589a48ab29a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b536e71d-dcd3-4d20-a10a-9589a48ab29a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71419812-ef9b-4b6b-bb06-1f48abe681d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:30254","PortSpecifier":{"PortValue":30254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71419812-ef9b-4b6b-bb06-1f48abe681d1","method":"DELETE","path":"/maas-api/v1/api-keys/b47e124e-a362-4287-880e-da2f0f809478","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71419812-ef9b-4b6b-bb06-1f48abe681d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:30254","PortSpecifier":{"PortValue":30254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676009,"nanos":825087777},"http":{"id":"71419812-ef9b-4b6b-bb06-1f48abe681d1","method":"DELETE","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/b47e124e-a362-4287-880e-da2f0f809478",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71419812-ef9b-4b6b-bb06-1f48abe681d1","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676309,"groups":["Engineering","Project-Alpha"],"iat":1780676009,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:dfa688ac-6c9f-166e-a71b-a5ecece6e04c","preferred_username":"alice_lead","scope":"email profile","sid":"zcjj_MWFyKWHfZxOFKBgkk7I","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71419812-ef9b-4b6b-bb06-1f48abe681d1","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676309,"groups":["Engineering","Project-Alpha"],"iat":1780676009,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:dfa688ac-6c9f-166e-a71b-a5ecece6e04c","preferred_username":"alice_lead","scope":"email profile","sid":"zcjj_MWFyKWHfZxOFKBgkk7I","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/b47e124e-a362-4287-880e-da2f0f809478",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71419812-ef9b-4b6b-bb06-1f48abe681d1","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71419812-ef9b-4b6b-bb06-1f48abe681d1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71419812-ef9b-4b6b-bb06-1f48abe681d1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71419812-ef9b-4b6b-bb06-1f48abe681d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71419812-ef9b-4b6b-bb06-1f48abe681d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdec9abf-2d21-44df-84b6-e015511b59d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:59238","PortSpecifier":{"PortValue":59238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bdec9abf-2d21-44df-84b6-e015511b59d6","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdec9abf-2d21-44df-84b6-e015511b59d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:59238","PortSpecifier":{"PortValue":59238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676009,"nanos":910626218},"http":{"id":"bdec9abf-2d21-44df-84b6-e015511b59d6","method":"POST","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bdec9abf-2d21-44df-84b6-e015511b59d6","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676309,"groups":["Engineering","Project-Alpha"],"iat":1780676009,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:484437f4-fdf8-1c7d-2b76-c9c83b904f4d","preferred_username":"alice_lead","scope":"email profile","sid":"B0PgdItbE6jiaida68cLak01","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bdec9abf-2d21-44df-84b6-e015511b59d6","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676309,"groups":["Engineering","Project-Alpha"],"iat":1780676009,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:484437f4-fdf8-1c7d-2b76-c9c83b904f4d","preferred_username":"alice_lead","scope":"email profile","sid":"B0PgdItbE6jiaida68cLak01","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdec9abf-2d21-44df-84b6-e015511b59d6","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdec9abf-2d21-44df-84b6-e015511b59d6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdec9abf-2d21-44df-84b6-e015511b59d6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdec9abf-2d21-44df-84b6-e015511b59d6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdec9abf-2d21-44df-84b6-e015511b59d6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"809ecba2-81b9-4bb9-bf4a-6f71cba61046","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:23578","PortSpecifier":{"PortValue":23578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"809ecba2-81b9-4bb9-bf4a-6f71cba61046","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"809ecba2-81b9-4bb9-bf4a-6f71cba61046","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:23578","PortSpecifier":{"PortValue":23578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676009,"nanos":935249016},"http":{"id":"809ecba2-81b9-4bb9-bf4a-6f71cba61046","method":"GET","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"809ecba2-81b9-4bb9-bf4a-6f71cba61046","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bjY8ej3zYhNBOu6O_5sHTY6IfiaoyAsZXglfjUC1Sqfu3zEzmlowrpqZiGHU"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"809ecba2-81b9-4bb9-bf4a-6f71cba61046","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bjY8ej3zYhNBOu6O_5sHTY6IfiaoyAsZXglfjUC1Sqfu3zEzmlowrpqZiGHU\"}"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"809ecba2-81b9-4bb9-bf4a-6f71cba61046","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"809ecba2-81b9-4bb9-bf4a-6f71cba61046","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"809ecba2-81b9-4bb9-bf4a-6f71cba61046","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"809ecba2-81b9-4bb9-bf4a-6f71cba61046","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"809ecba2-81b9-4bb9-bf4a-6f71cba61046","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"809ecba2-81b9-4bb9-bf4a-6f71cba61046","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"809ecba2-81b9-4bb9-bf4a-6f71cba61046","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"510be264-690b-4ad8-bff4-7fead6504f61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.30:48068","PortSpecifier":{"PortValue":48068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"510be264-690b-4ad8-bff4-7fead6504f61","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"510be264-690b-4ad8-bff4-7fead6504f61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.30:48068","PortSpecifier":{"PortValue":48068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676009,"nanos":941360951},"http":{"id":"510be264-690b-4ad8-bff4-7fead6504f61","method":"GET","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"510be264-690b-4ad8-bff4-7fead6504f61","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bjY8ej3zYhNBOu6O_5sHTY6IfiaoyAsZXglfjUC1Sqfu3zEzmlowrpqZiGHU"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"510be264-690b-4ad8-bff4-7fead6504f61","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bjY8ej3zYhNBOu6O_5sHTY6IfiaoyAsZXglfjUC1Sqfu3zEzmlowrpqZiGHU\"}"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"510be264-690b-4ad8-bff4-7fead6504f61","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"510be264-690b-4ad8-bff4-7fead6504f61","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"510be264-690b-4ad8-bff4-7fead6504f61","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"510be264-690b-4ad8-bff4-7fead6504f61","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"4e93f1986841c16506ee726a8192ec71d2a8bafa10275979a4129ddd337542b4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-1bjY8ej3zYhNBOu6O_5sHTY6IfiaoyAsZXglfjUC1Sqfu3zEzmlowrpqZiGHU","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.30","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~maas-default-gateway-openshift-default-687ff6996-6q92n.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.132.0.30","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"510be264-690b-4ad8-bff4-7fead6504f61"},"host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","id":"510be264-690b-4ad8-bff4-7fead6504f61","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":941360951,"seconds":1780676009},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.132.0.30:48068","port":48068}}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"510be264-690b-4ad8-bff4-7fead6504f61","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"510be264-690b-4ad8-bff4-7fead6504f61","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"510be264-690b-4ad8-bff4-7fead6504f61","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"510be264-690b-4ad8-bff4-7fead6504f61","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"510be264-690b-4ad8-bff4-7fead6504f61","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"510be264-690b-4ad8-bff4-7fead6504f61","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"aea04831-75ad-4763-8983-f88fe509d446","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"510be264-690b-4ad8-bff4-7fead6504f61","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"510be264-690b-4ad8-bff4-7fead6504f61","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97b8b459-0c0c-45fd-bc0a-051f903a4b3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:30262","PortSpecifier":{"PortValue":30262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97b8b459-0c0c-45fd-bc0a-051f903a4b3f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97b8b459-0c0c-45fd-bc0a-051f903a4b3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:30262","PortSpecifier":{"PortValue":30262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676010,"nanos":27524121},"http":{"id":"97b8b459-0c0c-45fd-bc0a-051f903a4b3f","method":"POST","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97b8b459-0c0c-45fd-bc0a-051f903a4b3f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676310,"groups":["Engineering","Project-Alpha"],"iat":1780676010,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:0b224404-0eb6-5ec9-d90f-bf46f62de0af","preferred_username":"alice_lead","scope":"email profile","sid":"peo2KrtZ3VmG_JflQGucaUOb","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97b8b459-0c0c-45fd-bc0a-051f903a4b3f","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676310,"groups":["Engineering","Project-Alpha"],"iat":1780676010,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:0b224404-0eb6-5ec9-d90f-bf46f62de0af","preferred_username":"alice_lead","scope":"email profile","sid":"peo2KrtZ3VmG_JflQGucaUOb","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97b8b459-0c0c-45fd-bc0a-051f903a4b3f","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97b8b459-0c0c-45fd-bc0a-051f903a4b3f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97b8b459-0c0c-45fd-bc0a-051f903a4b3f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97b8b459-0c0c-45fd-bc0a-051f903a4b3f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97b8b459-0c0c-45fd-bc0a-051f903a4b3f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79864fb5-040e-4f42-a1cf-54ce00944235","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:32498","PortSpecifier":{"PortValue":32498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79864fb5-040e-4f42-a1cf-54ce00944235","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79864fb5-040e-4f42-a1cf-54ce00944235","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:32498","PortSpecifier":{"PortValue":32498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676010,"nanos":51893735},"http":{"id":"79864fb5-040e-4f42-a1cf-54ce00944235","method":"GET","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79864fb5-040e-4f42-a1cf-54ce00944235","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UL6jyqivRtaPYCnF_nqWYCPnh1mFxDEdWOTIcYcs0GlFxZrSAyQZaFgpdIBv"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79864fb5-040e-4f42-a1cf-54ce00944235","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UL6jyqivRtaPYCnF_nqWYCPnh1mFxDEdWOTIcYcs0GlFxZrSAyQZaFgpdIBv\"}"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79864fb5-040e-4f42-a1cf-54ce00944235","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79864fb5-040e-4f42-a1cf-54ce00944235","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79864fb5-040e-4f42-a1cf-54ce00944235","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79864fb5-040e-4f42-a1cf-54ce00944235","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79864fb5-040e-4f42-a1cf-54ce00944235","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79864fb5-040e-4f42-a1cf-54ce00944235","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79864fb5-040e-4f42-a1cf-54ce00944235","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82cf7e2e-b816-49f0-8a39-5f65b31d8be3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:59254","PortSpecifier":{"PortValue":59254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82cf7e2e-b816-49f0-8a39-5f65b31d8be3","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82cf7e2e-b816-49f0-8a39-5f65b31d8be3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:59254","PortSpecifier":{"PortValue":59254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676010,"nanos":74260910},"http":{"id":"82cf7e2e-b816-49f0-8a39-5f65b31d8be3","method":"GET","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82cf7e2e-b816-49f0-8a39-5f65b31d8be3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UL6jyqivRtaPYCnF_nqWYCPnh1mFxDEdWOTIcYcs0GlFxZrSAyQZaFgpdIBv"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82cf7e2e-b816-49f0-8a39-5f65b31d8be3","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UL6jyqivRtaPYCnF_nqWYCPnh1mFxDEdWOTIcYcs0GlFxZrSAyQZaFgpdIBv\"}"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82cf7e2e-b816-49f0-8a39-5f65b31d8be3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82cf7e2e-b816-49f0-8a39-5f65b31d8be3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82cf7e2e-b816-49f0-8a39-5f65b31d8be3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82cf7e2e-b816-49f0-8a39-5f65b31d8be3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82cf7e2e-b816-49f0-8a39-5f65b31d8be3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82cf7e2e-b816-49f0-8a39-5f65b31d8be3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82cf7e2e-b816-49f0-8a39-5f65b31d8be3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"511877c4-30ee-49de-b3a9-dc8bc9fe1af9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.30:48068","PortSpecifier":{"PortValue":48068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"511877c4-30ee-49de-b3a9-dc8bc9fe1af9","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"511877c4-30ee-49de-b3a9-dc8bc9fe1af9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.30:48068","PortSpecifier":{"PortValue":48068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676010,"nanos":80520243},"http":{"id":"511877c4-30ee-49de-b3a9-dc8bc9fe1af9","method":"GET","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"511877c4-30ee-49de-b3a9-dc8bc9fe1af9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UL6jyqivRtaPYCnF_nqWYCPnh1mFxDEdWOTIcYcs0GlFxZrSAyQZaFgpdIBv"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"511877c4-30ee-49de-b3a9-dc8bc9fe1af9","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UL6jyqivRtaPYCnF_nqWYCPnh1mFxDEdWOTIcYcs0GlFxZrSAyQZaFgpdIBv\"}"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"511877c4-30ee-49de-b3a9-dc8bc9fe1af9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"511877c4-30ee-49de-b3a9-dc8bc9fe1af9","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"511877c4-30ee-49de-b3a9-dc8bc9fe1af9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"511877c4-30ee-49de-b3a9-dc8bc9fe1af9","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"4e93f1986841c16506ee726a8192ec71d2a8bafa10275979a4129ddd337542b4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-UL6jyqivRtaPYCnF_nqWYCPnh1mFxDEdWOTIcYcs0GlFxZrSAyQZaFgpdIBv","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.30","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~maas-default-gateway-openshift-default-687ff6996-6q92n.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.132.0.30","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"511877c4-30ee-49de-b3a9-dc8bc9fe1af9"},"host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","id":"511877c4-30ee-49de-b3a9-dc8bc9fe1af9","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":80520243,"seconds":1780676010},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.132.0.30:48068","port":48068}}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"511877c4-30ee-49de-b3a9-dc8bc9fe1af9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"511877c4-30ee-49de-b3a9-dc8bc9fe1af9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"511877c4-30ee-49de-b3a9-dc8bc9fe1af9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"511877c4-30ee-49de-b3a9-dc8bc9fe1af9","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"511877c4-30ee-49de-b3a9-dc8bc9fe1af9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"511877c4-30ee-49de-b3a9-dc8bc9fe1af9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"0a726a2d-98db-4e68-a68e-e9934792a3ab","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"511877c4-30ee-49de-b3a9-dc8bc9fe1af9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"511877c4-30ee-49de-b3a9-dc8bc9fe1af9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8748794-a167-9a22-806b-ec18fe94cc23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:23594","PortSpecifier":{"PortValue":23594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8748794-a167-9a22-806b-ec18fe94cc23","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8748794-a167-9a22-806b-ec18fe94cc23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:23594","PortSpecifier":{"PortValue":23594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676010,"nanos":178282124},"http":{"id":"c8748794-a167-9a22-806b-ec18fe94cc23","method":"POST","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8748794-a167-9a22-806b-ec18fe94cc23","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676310,"groups":["Engineering","Project-Alpha"],"iat":1780676010,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8475d0d8-c8b1-af8f-5941-379266d3a6c2","preferred_username":"alice_lead","scope":"email profile","sid":"p0B_xe9L2ku9bYUMeZCc5DLT","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8748794-a167-9a22-806b-ec18fe94cc23","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676310,"groups":["Engineering","Project-Alpha"],"iat":1780676010,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8475d0d8-c8b1-af8f-5941-379266d3a6c2","preferred_username":"alice_lead","scope":"email profile","sid":"p0B_xe9L2ku9bYUMeZCc5DLT","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8748794-a167-9a22-806b-ec18fe94cc23","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8748794-a167-9a22-806b-ec18fe94cc23","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8748794-a167-9a22-806b-ec18fe94cc23","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8748794-a167-9a22-806b-ec18fe94cc23","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8748794-a167-9a22-806b-ec18fe94cc23","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"312adab0-c26f-4fbc-baed-bc9c7f755251","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:16750","PortSpecifier":{"PortValue":16750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"312adab0-c26f-4fbc-baed-bc9c7f755251","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"312adab0-c26f-4fbc-baed-bc9c7f755251","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:16750","PortSpecifier":{"PortValue":16750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676010,"nanos":202356720},"http":{"id":"312adab0-c26f-4fbc-baed-bc9c7f755251","method":"GET","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"312adab0-c26f-4fbc-baed-bc9c7f755251","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hmhSgg2R2E0ltCRY_vy3gPurLo3ZzozrKOa9bVJZfuerQVCnR9OLDLnk81Zs"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"312adab0-c26f-4fbc-baed-bc9c7f755251","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hmhSgg2R2E0ltCRY_vy3gPurLo3ZzozrKOa9bVJZfuerQVCnR9OLDLnk81Zs\"}"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"312adab0-c26f-4fbc-baed-bc9c7f755251","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"312adab0-c26f-4fbc-baed-bc9c7f755251","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"312adab0-c26f-4fbc-baed-bc9c7f755251","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"312adab0-c26f-4fbc-baed-bc9c7f755251","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"312adab0-c26f-4fbc-baed-bc9c7f755251","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"312adab0-c26f-4fbc-baed-bc9c7f755251","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"312adab0-c26f-4fbc-baed-bc9c7f755251","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82be80bf-3c6a-4113-96ae-66f033e68445","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.30:48068","PortSpecifier":{"PortValue":48068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82be80bf-3c6a-4113-96ae-66f033e68445","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82be80bf-3c6a-4113-96ae-66f033e68445","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.30:48068","PortSpecifier":{"PortValue":48068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676010,"nanos":208435367},"http":{"id":"82be80bf-3c6a-4113-96ae-66f033e68445","method":"GET","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82be80bf-3c6a-4113-96ae-66f033e68445","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hmhSgg2R2E0ltCRY_vy3gPurLo3ZzozrKOa9bVJZfuerQVCnR9OLDLnk81Zs"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82be80bf-3c6a-4113-96ae-66f033e68445","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hmhSgg2R2E0ltCRY_vy3gPurLo3ZzozrKOa9bVJZfuerQVCnR9OLDLnk81Zs\"}"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82be80bf-3c6a-4113-96ae-66f033e68445","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82be80bf-3c6a-4113-96ae-66f033e68445","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82be80bf-3c6a-4113-96ae-66f033e68445","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82be80bf-3c6a-4113-96ae-66f033e68445","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"4e93f1986841c16506ee726a8192ec71d2a8bafa10275979a4129ddd337542b4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-hmhSgg2R2E0ltCRY_vy3gPurLo3ZzozrKOa9bVJZfuerQVCnR9OLDLnk81Zs","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.30","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~maas-default-gateway-openshift-default-687ff6996-6q92n.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.132.0.30","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"82be80bf-3c6a-4113-96ae-66f033e68445"},"host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","id":"82be80bf-3c6a-4113-96ae-66f033e68445","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":208435367,"seconds":1780676010},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.132.0.30:48068","port":48068}}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82be80bf-3c6a-4113-96ae-66f033e68445","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82be80bf-3c6a-4113-96ae-66f033e68445","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82be80bf-3c6a-4113-96ae-66f033e68445","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82be80bf-3c6a-4113-96ae-66f033e68445","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82be80bf-3c6a-4113-96ae-66f033e68445","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82be80bf-3c6a-4113-96ae-66f033e68445","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"8e7b73d2-bf80-4ff6-b543-375f689aa947","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82be80bf-3c6a-4113-96ae-66f033e68445","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82be80bf-3c6a-4113-96ae-66f033e68445","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"557fc32d-940b-454a-b6d9-bd29099a31a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:30266","PortSpecifier":{"PortValue":30266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"557fc32d-940b-454a-b6d9-bd29099a31a6","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"557fc32d-940b-454a-b6d9-bd29099a31a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:30266","PortSpecifier":{"PortValue":30266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676010,"nanos":234778730},"http":{"id":"557fc32d-940b-454a-b6d9-bd29099a31a6","method":"GET","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"557fc32d-940b-454a-b6d9-bd29099a31a6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hmhSgg2R2E0ltCRY_vy3gPurLo3ZzozrKOa9bVJZfuerQVCnR9OLDLnk81Zs"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"557fc32d-940b-454a-b6d9-bd29099a31a6","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hmhSgg2R2E0ltCRY_vy3gPurLo3ZzozrKOa9bVJZfuerQVCnR9OLDLnk81Zs\"}"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"557fc32d-940b-454a-b6d9-bd29099a31a6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"557fc32d-940b-454a-b6d9-bd29099a31a6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"557fc32d-940b-454a-b6d9-bd29099a31a6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"557fc32d-940b-454a-b6d9-bd29099a31a6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"557fc32d-940b-454a-b6d9-bd29099a31a6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"557fc32d-940b-454a-b6d9-bd29099a31a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"557fc32d-940b-454a-b6d9-bd29099a31a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2f785de-32f2-4a29-8446-78744e1206a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.30:48068","PortSpecifier":{"PortValue":48068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2f785de-32f2-4a29-8446-78744e1206a1","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2f785de-32f2-4a29-8446-78744e1206a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.30:48068","PortSpecifier":{"PortValue":48068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676010,"nanos":240314116},"http":{"id":"d2f785de-32f2-4a29-8446-78744e1206a1","method":"GET","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2f785de-32f2-4a29-8446-78744e1206a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hmhSgg2R2E0ltCRY_vy3gPurLo3ZzozrKOa9bVJZfuerQVCnR9OLDLnk81Zs"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2f785de-32f2-4a29-8446-78744e1206a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hmhSgg2R2E0ltCRY_vy3gPurLo3ZzozrKOa9bVJZfuerQVCnR9OLDLnk81Zs\"}"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2f785de-32f2-4a29-8446-78744e1206a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2f785de-32f2-4a29-8446-78744e1206a1","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2f785de-32f2-4a29-8446-78744e1206a1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2f785de-32f2-4a29-8446-78744e1206a1","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"4e93f1986841c16506ee726a8192ec71d2a8bafa10275979a4129ddd337542b4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-hmhSgg2R2E0ltCRY_vy3gPurLo3ZzozrKOa9bVJZfuerQVCnR9OLDLnk81Zs","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.30","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQAoETkFNRRI4GjZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC02ODdmZjY5OTYtNnE5Mm4KIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnQKBU9XTkVSEmsaaWt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9tYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAo5Cg1XT1JLTE9BRF9OQU1FEigaJm1hYXMtZGVmYXVsdC1nYXRld2F5LW9wZW5zaGlmdC1kZWZhdWx0","x-envoy-peer-metadata-id":"router~10.134.0.31~maas-default-gateway-openshift-default-687ff6996-6q92n.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.132.0.30","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"d2f785de-32f2-4a29-8446-78744e1206a1"},"host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","id":"d2f785de-32f2-4a29-8446-78744e1206a1","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":240314116,"seconds":1780676010},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.132.0.30:48068","port":48068}}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2f785de-32f2-4a29-8446-78744e1206a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2f785de-32f2-4a29-8446-78744e1206a1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2f785de-32f2-4a29-8446-78744e1206a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2f785de-32f2-4a29-8446-78744e1206a1","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2f785de-32f2-4a29-8446-78744e1206a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2f785de-32f2-4a29-8446-78744e1206a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"8e7b73d2-bf80-4ff6-b543-375f689aa947","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2f785de-32f2-4a29-8446-78744e1206a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2f785de-32f2-4a29-8446-78744e1206a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da6a3a13-8a49-45a5-b79d-7893aa6aeaaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28114","PortSpecifier":{"PortValue":28114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da6a3a13-8a49-45a5-b79d-7893aa6aeaaa","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da6a3a13-8a49-45a5-b79d-7893aa6aeaaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28114","PortSpecifier":{"PortValue":28114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780676010,"nanos":326357070},"http":{"id":"da6a3a13-8a49-45a5-b79d-7893aa6aeaaa","method":"POST","headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da6a3a13-8a49-45a5-b79d-7893aa6aeaaa","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676310,"groups":["Engineering","Project-Alpha"],"iat":1780676010,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:74cd3db8-2a91-55c8-1aec-ac41ce114387","preferred_username":"alice_lead","scope":"email profile","sid":"QKY74qcuglZqK_Py1T-JsYY8","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da6a3a13-8a49-45a5-b79d-7893aa6aeaaa","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780676310,"groups":["Engineering","Project-Alpha"],"iat":1780676010,"iss":"https://keycloak.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:74cd3db8-2a91-55c8-1aec-ac41ce114387","preferred_username":"alice_lead","scope":"email profile","sid":"QKY74qcuglZqK_Py1T-JsYY8","sub":"398b0e3f-2bef-4b02-ab0d-c9ff981086d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.96f9f7d6-a045-4889-b7c1-052146c382ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da6a3a13-8a49-45a5-b79d-7893aa6aeaaa","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da6a3a13-8a49-45a5-b79d-7893aa6aeaaa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da6a3a13-8a49-45a5-b79d-7893aa6aeaaa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da6a3a13-8a49-45a5-b79d-7893aa6aeaaa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-05T16:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da6a3a13-8a49-45a5-b79d-7893aa6aeaaa","authorized":true,"response":"OK"}