{"level":"info","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T19:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T19:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"} {"level":"info","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T19:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T19:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"} {"level":"error","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T19:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"debug","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T19:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T19:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T19:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"info","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"debug","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T19:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T19:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"} {"level":"info","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T19:39:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T19:39:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"info","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-10T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"error","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-10T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"} {"level":"info","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81d9ec0f-a65d-4cd1-b8f7-0b2125f1ac34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:56110","PortSpecifier":{"PortValue":56110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81d9ec0f-a65d-4cd1-b8f7-0b2125f1ac34","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81d9ec0f-a65d-4cd1-b8f7-0b2125f1ac34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:56110","PortSpecifier":{"PortValue":56110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120396,"nanos":524822763},"http":{"id":"81d9ec0f-a65d-4cd1-b8f7-0b2125f1ac34","method":"POST","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"81d9ec0f-a65d-4cd1-b8f7-0b2125f1ac34","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"81d9ec0f-a65d-4cd1-b8f7-0b2125f1ac34","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81d9ec0f-a65d-4cd1-b8f7-0b2125f1ac34","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71fd0afd-216d-46e9-bd66-33342f677c0f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7149e851-2a91-4b79-9c3d-34294d2489a1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/54f36fb5aa62"]}} {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81d9ec0f-a65d-4cd1-b8f7-0b2125f1ac34","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/54f36fb5aa62"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7149e851-2a91-4b79-9c3d-34294d2489a1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71fd0afd-216d-46e9-bd66-33342f677c0f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81d9ec0f-a65d-4cd1-b8f7-0b2125f1ac34","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81d9ec0f-a65d-4cd1-b8f7-0b2125f1ac34","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81d9ec0f-a65d-4cd1-b8f7-0b2125f1ac34","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81d9ec0f-a65d-4cd1-b8f7-0b2125f1ac34","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfba5025-accc-4634-a72c-ee632729ad55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52062","PortSpecifier":{"PortValue":52062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dfba5025-accc-4634-a72c-ee632729ad55","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfba5025-accc-4634-a72c-ee632729ad55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52062","PortSpecifier":{"PortValue":52062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120396,"nanos":904722715},"http":{"id":"dfba5025-accc-4634-a72c-ee632729ad55","method":"POST","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"info","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfba5025-accc-4634-a72c-ee632729ad55","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}} {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfba5025-accc-4634-a72c-ee632729ad55","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** {"level":"info","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca53fc10-556b-4f85-80d6-09e5844de96d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:60242","PortSpecifier":{"PortValue":60242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca53fc10-556b-4f85-80d6-09e5844de96d","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca53fc10-556b-4f85-80d6-09e5844de96d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:60242","PortSpecifier":{"PortValue":60242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120396,"nanos":930647987},"http":{"id":"ca53fc10-556b-4f85-80d6-09e5844de96d","method":"POST","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"httpbin.org:443/*","x-envoy-external-address":"100.64.0.3","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-gateway-model-name":"e2e-external-model","x-request-id":"ca53fc10-556b-4f85-80d6-09e5844de96d"},"path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"},"metadata_context":{}}} {"level":"info","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca53fc10-556b-4f85-80d6-09e5844de96d","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}} {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca53fc10-556b-4f85-80d6-09e5844de96d","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** {"level":"info","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c88ae96d-cc19-47a5-80ec-813e248b2c67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:14672","PortSpecifier":{"PortValue":14672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c88ae96d-cc19-47a5-80ec-813e248b2c67","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c88ae96d-cc19-47a5-80ec-813e248b2c67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:14672","PortSpecifier":{"PortValue":14672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120396,"nanos":956848629},"http":{"id":"c88ae96d-cc19-47a5-80ec-813e248b2c67","method":"POST","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c88ae96d-cc19-47a5-80ec-813e248b2c67","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kUh57fQdtcP5nHIe_jhf4Rum9pfo5HSi1m5TlDJXoECsDZKuuh0gYh3XwCWV"} {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c88ae96d-cc19-47a5-80ec-813e248b2c67","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kUh57fQdtcP5nHIe_jhf4Rum9pfo5HSi1m5TlDJXoECsDZKuuh0gYh3XwCWV\"}"} {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c88ae96d-cc19-47a5-80ec-813e248b2c67","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c88ae96d-cc19-47a5-80ec-813e248b2c67","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-external-model\",\"requestedSubscription\":\"e2e-external-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c88ae96d-cc19-47a5-80ec-813e248b2c67","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-external-model","source":"external","token_rate_limits":[{"limit":10000,"window":"1h"}]}],"name":"e2e-external-subscription","namespace":"models-as-a-service","phase":"Active","ready":true}} {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c88ae96d-cc19-47a5-80ec-813e248b2c67","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c88ae96d-cc19-47a5-80ec-813e248b2c67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c88ae96d-cc19-47a5-80ec-813e248b2c67","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c88ae96d-cc19-47a5-80ec-813e248b2c67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c88ae96d-cc19-47a5-80ec-813e248b2c67","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c88ae96d-cc19-47a5-80ec-813e248b2c67","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-external-subscription"} {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c88ae96d-cc19-47a5-80ec-813e248b2c67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"454c519d-77c2-4924-9423-e15da7fea4ef","selected_subscription":"e2e-external-subscription","selected_subscription_key":"models-as-a-service/e2e-external-subscription@llm/e2e-external-model","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"e2e-external-model","source":"external","token_rate_limits":[{"limit":10000,"window":"1h"}]}],"name":"e2e-external-subscription","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c88ae96d-cc19-47a5-80ec-813e248b2c67","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:39:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c88ae96d-cc19-47a5-80ec-813e248b2c67","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T19:39:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T19:39:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"} {"level":"info","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"} {"level":"debug","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T19:39:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T19:39:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T19:39:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T19:39:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"} {"level":"info","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T19:39:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T19:39:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"} {"level":"info","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T19:39:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T19:39:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"} {"level":"info","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"} {"level":"info","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T19:39:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T19:39:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"} {"level":"info","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"} {"level":"debug","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T19:39:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T19:39:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T19:39:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T19:39:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"} {"level":"info","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T19:39:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T19:39:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"} {"level":"info","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T19:39:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T19:39:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"} {"level":"error","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-10T19:40:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"} {"level":"info","ts":"2026-06-10T19:40:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"} {"level":"debug","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T19:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"info","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T19:40:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T19:40:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"info","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"info","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T19:40:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T19:40:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T19:40:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T19:40:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"error","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-10T19:40:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-10T19:40:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"} {"level":"info","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"} {"level":"info","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-10T19:40:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-10T19:40:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-10T19:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"} {"level":"info","ts":"2026-06-10T19:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"} {"level":"info","ts":"2026-06-10T19:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"info","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebee9abf-4d44-4bd5-b29b-88aa52eec94d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:5942","PortSpecifier":{"PortValue":5942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ebee9abf-4d44-4bd5-b29b-88aa52eec94d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebee9abf-4d44-4bd5-b29b-88aa52eec94d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:5942","PortSpecifier":{"PortValue":5942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120463,"nanos":657728494},"http":{"id":"ebee9abf-4d44-4bd5-b29b-88aa52eec94d","method":"POST","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ebee9abf-4d44-4bd5-b29b-88aa52eec94d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120763,"groups":["Engineering","Project-Alpha"],"iat":1781120463,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ecf3c6d3-b05a-35bb-c436-c7e24d47700f","preferred_username":"alice_lead","scope":"email profile","sid":"9t24zzasOWkm0d13wiWLWWXU","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}} {"level":"debug","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ebee9abf-4d44-4bd5-b29b-88aa52eec94d","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120763,"groups":["Engineering","Project-Alpha"],"iat":1781120463,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ecf3c6d3-b05a-35bb-c436-c7e24d47700f","preferred_username":"alice_lead","scope":"email profile","sid":"9t24zzasOWkm0d13wiWLWWXU","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebee9abf-4d44-4bd5-b29b-88aa52eec94d","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebee9abf-4d44-4bd5-b29b-88aa52eec94d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebee9abf-4d44-4bd5-b29b-88aa52eec94d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"info","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebee9abf-4d44-4bd5-b29b-88aa52eec94d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebee9abf-4d44-4bd5-b29b-88aa52eec94d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcd3cd2a-8642-4193-9718-17a0229d3378","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41544","PortSpecifier":{"PortValue":41544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bcd3cd2a-8642-4193-9718-17a0229d3378","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcd3cd2a-8642-4193-9718-17a0229d3378","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41544","PortSpecifier":{"PortValue":41544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120463,"nanos":770283294},"http":{"id":"bcd3cd2a-8642-4193-9718-17a0229d3378","method":"POST","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"bcd3cd2a-8642-4193-9718-17a0229d3378","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bcd3cd2a-8642-4193-9718-17a0229d3378","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"bcd3cd2a-8642-4193-9718-17a0229d3378","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"not authenticated"} {"level":"info","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcd3cd2a-8642-4193-9718-17a0229d3378","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}"}} {"level":"debug","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcd3cd2a-8642-4193-9718-17a0229d3378","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}} {"level":"info","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5a65439-01d8-4446-95a9-5734720c5cdb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:24720","PortSpecifier":{"PortValue":24720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5a65439-01d8-4446-95a9-5734720c5cdb","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5a65439-01d8-4446-95a9-5734720c5cdb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:24720","PortSpecifier":{"PortValue":24720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120463,"nanos":833412305},"http":{"id":"a5a65439-01d8-4446-95a9-5734720c5cdb","method":"POST","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer","content-length":"35","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.27~maas-default-gateway-openshift-default-687ff6996-csnqm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-request-id":"a5a65439-01d8-4446-95a9-5734720c5cdb"},"path":"/maas-api/v1/api-keys","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"metadata_context":{}}} {"level":"debug","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"a5a65439-01d8-4446-95a9-5734720c5cdb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"credential not found"} {"level":"info","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5a65439-01d8-4446-95a9-5734720c5cdb","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"openshift-identities\":\"credential not found\"}"}} {"level":"debug","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5a65439-01d8-4446-95a9-5734720c5cdb","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"openshift-identities\":\"credential not found\"}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}} {"level":"info","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d855131-e6c8-4fc3-af8a-0ac7786dff15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:2944","PortSpecifier":{"PortValue":2944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d855131-e6c8-4fc3-af8a-0ac7786dff15","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d855131-e6c8-4fc3-af8a-0ac7786dff15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:2944","PortSpecifier":{"PortValue":2944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120463,"nanos":858799298},"http":{"id":"7d855131-e6c8-4fc3-af8a-0ac7786dff15","method":"POST","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-length":"36","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.27~maas-default-gateway-openshift-default-687ff6996-csnqm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-request-id":"7d855131-e6c8-4fc3-af8a-0ac7786dff15"},"path":"/maas-api/v1/api-keys","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"metadata_context":{}}} {"level":"info","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d855131-e6c8-4fc3-af8a-0ac7786dff15","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}"}} {"level":"debug","ts":"2026-06-10T19:41:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d855131-e6c8-4fc3-af8a-0ac7786dff15","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}} {"level":"info","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea334fe8-dd49-4b30-aaf1-06d1d068e2e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:60340","PortSpecifier":{"PortValue":60340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea334fe8-dd49-4b30-aaf1-06d1d068e2e9","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea334fe8-dd49-4b30-aaf1-06d1d068e2e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:60340","PortSpecifier":{"PortValue":60340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120464,"nanos":222064959},"http":{"id":"ea334fe8-dd49-4b30-aaf1-06d1d068e2e9","method":"POST","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea334fe8-dd49-4b30-aaf1-06d1d068e2e9","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120764,"groups":["Site-Reliability"],"iat":1781120464,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:b38e3d81-73a3-a708-a337-87e267720fbb","preferred_username":"bob_sre","scope":"email profile","sid":"g0OdyPI2RV_3uXf9HKq5aT3s","sub":"edd13d92-955b-44ab-b9c5-9959ccd50d08","typ":"Bearer"}} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea334fe8-dd49-4b30-aaf1-06d1d068e2e9","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120764,"groups":["Site-Reliability"],"iat":1781120464,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:b38e3d81-73a3-a708-a337-87e267720fbb","preferred_username":"bob_sre","scope":"email profile","sid":"g0OdyPI2RV_3uXf9HKq5aT3s","sub":"edd13d92-955b-44ab-b9c5-9959ccd50d08","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea334fe8-dd49-4b30-aaf1-06d1d068e2e9","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea334fe8-dd49-4b30-aaf1-06d1d068e2e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea334fe8-dd49-4b30-aaf1-06d1d068e2e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"} {"level":"info","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea334fe8-dd49-4b30-aaf1-06d1d068e2e9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea334fe8-dd49-4b30-aaf1-06d1d068e2e9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e9d12e8-72ae-4471-8530-375b5e402a91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:5954","PortSpecifier":{"PortValue":5954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e9d12e8-72ae-4471-8530-375b5e402a91","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e9d12e8-72ae-4471-8530-375b5e402a91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:5954","PortSpecifier":{"PortValue":5954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120464,"nanos":437016514},"http":{"id":"9e9d12e8-72ae-4471-8530-375b5e402a91","method":"POST","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e9d12e8-72ae-4471-8530-375b5e402a91","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120764,"groups":["Engineering","Project-Alpha"],"iat":1781120464,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:70fa948e-a1a8-b582-2164-5066eb68ab34","preferred_username":"alice_lead","scope":"email profile","sid":"ufXryx4D143k9L64En_qmcFh","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e9d12e8-72ae-4471-8530-375b5e402a91","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120764,"groups":["Engineering","Project-Alpha"],"iat":1781120464,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:70fa948e-a1a8-b582-2164-5066eb68ab34","preferred_username":"alice_lead","scope":"email profile","sid":"ufXryx4D143k9L64En_qmcFh","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e9d12e8-72ae-4471-8530-375b5e402a91","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e9d12e8-72ae-4471-8530-375b5e402a91","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e9d12e8-72ae-4471-8530-375b5e402a91","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"info","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e9d12e8-72ae-4471-8530-375b5e402a91","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e9d12e8-72ae-4471-8530-375b5e402a91","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ea7748b-ec5b-43b9-9ca0-bc210158b7ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:8154","PortSpecifier":{"PortValue":8154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ea7748b-ec5b-43b9-9ca0-bc210158b7ac","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ea7748b-ec5b-43b9-9ca0-bc210158b7ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:8154","PortSpecifier":{"PortValue":8154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120464,"nanos":464967484},"http":{"id":"7ea7748b-ec5b-43b9-9ca0-bc210158b7ac","method":"GET","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ea7748b-ec5b-43b9-9ca0-bc210158b7ac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1F0sqw4aYCQ6mauiW_MuyF3IODdGSaBmC4aX3boXUfjVm3TX7jnQkvxRgPOgV"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ea7748b-ec5b-43b9-9ca0-bc210158b7ac","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1F0sqw4aYCQ6mauiW_MuyF3IODdGSaBmC4aX3boXUfjVm3TX7jnQkvxRgPOgV\"}"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ea7748b-ec5b-43b9-9ca0-bc210158b7ac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ea7748b-ec5b-43b9-9ca0-bc210158b7ac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ea7748b-ec5b-43b9-9ca0-bc210158b7ac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ea7748b-ec5b-43b9-9ca0-bc210158b7ac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ea7748b-ec5b-43b9-9ca0-bc210158b7ac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"info","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ea7748b-ec5b-43b9-9ca0-bc210158b7ac","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ea7748b-ec5b-43b9-9ca0-bc210158b7ac","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1660c297-c4e7-9b12-bfd3-5137bc9bb266","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:34620","PortSpecifier":{"PortValue":34620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1660c297-c4e7-9b12-bfd3-5137bc9bb266","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1660c297-c4e7-9b12-bfd3-5137bc9bb266","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:34620","PortSpecifier":{"PortValue":34620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120464,"nanos":480594032},"http":{"id":"1660c297-c4e7-9b12-bfd3-5137bc9bb266","method":"GET","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1660c297-c4e7-9b12-bfd3-5137bc9bb266","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1F0sqw4aYCQ6mauiW_MuyF3IODdGSaBmC4aX3boXUfjVm3TX7jnQkvxRgPOgV"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1660c297-c4e7-9b12-bfd3-5137bc9bb266","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1F0sqw4aYCQ6mauiW_MuyF3IODdGSaBmC4aX3boXUfjVm3TX7jnQkvxRgPOgV\"}"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1660c297-c4e7-9b12-bfd3-5137bc9bb266","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1660c297-c4e7-9b12-bfd3-5137bc9bb266","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1660c297-c4e7-9b12-bfd3-5137bc9bb266","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1660c297-c4e7-9b12-bfd3-5137bc9bb266","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-1F0sqw4aYCQ6mauiW_MuyF3IODdGSaBmC4aX3boXUfjVm3TX7jnQkvxRgPOgV","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.32","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQAoETkFNRRI4GjZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC02ODdmZjY5OTYtY3NucW0KIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnQKBU9XTkVSEmsaaWt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9tYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAo5Cg1XT1JLTE9BRF9OQU1FEigaJm1hYXMtZGVmYXVsdC1nYXRld2F5LW9wZW5zaGlmdC1kZWZhdWx0","x-envoy-peer-metadata-id":"router~10.133.0.27~maas-default-gateway-openshift-default-687ff6996-csnqm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.133.0.32","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"1660c297-c4e7-9b12-bfd3-5137bc9bb266"},"host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","id":"1660c297-c4e7-9b12-bfd3-5137bc9bb266","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":480594032,"seconds":1781120464},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.133.0.32:34620","port":34620}}} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1660c297-c4e7-9b12-bfd3-5137bc9bb266","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1660c297-c4e7-9b12-bfd3-5137bc9bb266","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1660c297-c4e7-9b12-bfd3-5137bc9bb266","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1660c297-c4e7-9b12-bfd3-5137bc9bb266","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1660c297-c4e7-9b12-bfd3-5137bc9bb266","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1660c297-c4e7-9b12-bfd3-5137bc9bb266","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"79fca7d0-0e84-4f45-9551-359ef2f92ec6","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}} {"level":"info","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1660c297-c4e7-9b12-bfd3-5137bc9bb266","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1660c297-c4e7-9b12-bfd3-5137bc9bb266","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd459437-527f-4484-9dfb-3e9b9c5d0697","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:24732","PortSpecifier":{"PortValue":24732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd459437-527f-4484-9dfb-3e9b9c5d0697","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd459437-527f-4484-9dfb-3e9b9c5d0697","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:24732","PortSpecifier":{"PortValue":24732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120464,"nanos":509677488},"http":{"id":"dd459437-527f-4484-9dfb-3e9b9c5d0697","method":"POST","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd459437-527f-4484-9dfb-3e9b9c5d0697","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1F0sqw4aYCQ6mauiW_MuyF3IODdGSaBmC4aX3boXUfjVm3TX7jnQkvxRgPOgV"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dd459437-527f-4484-9dfb-3e9b9c5d0697","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1F0sqw4aYCQ6mauiW_MuyF3IODdGSaBmC4aX3boXUfjVm3TX7jnQkvxRgPOgV\"}"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dd459437-527f-4484-9dfb-3e9b9c5d0697","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dd459437-527f-4484-9dfb-3e9b9c5d0697","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dd459437-527f-4484-9dfb-3e9b9c5d0697","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd459437-527f-4484-9dfb-3e9b9c5d0697","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd459437-527f-4484-9dfb-3e9b9c5d0697","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd459437-527f-4484-9dfb-3e9b9c5d0697","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd459437-527f-4484-9dfb-3e9b9c5d0697","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd459437-527f-4484-9dfb-3e9b9c5d0697","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd459437-527f-4484-9dfb-3e9b9c5d0697","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd459437-527f-4484-9dfb-3e9b9c5d0697","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"79fca7d0-0e84-4f45-9551-359ef2f92ec6","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}} {"level":"info","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd459437-527f-4484-9dfb-3e9b9c5d0697","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd459437-527f-4484-9dfb-3e9b9c5d0697","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"863c6069-2a1c-4790-9db9-672e6efe507c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:60344","PortSpecifier":{"PortValue":60344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"863c6069-2a1c-4790-9db9-672e6efe507c","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"863c6069-2a1c-4790-9db9-672e6efe507c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:60344","PortSpecifier":{"PortValue":60344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120464,"nanos":607629524},"http":{"id":"863c6069-2a1c-4790-9db9-672e6efe507c","method":"POST","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"863c6069-2a1c-4790-9db9-672e6efe507c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120764,"groups":["Engineering","Project-Alpha"],"iat":1781120464,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:61892fb7-659f-8ab0-5ade-0e071764f1ff","preferred_username":"alice_lead","scope":"email profile","sid":"ZQj3MXR3Vt4Js5Az8jigv5m1","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"863c6069-2a1c-4790-9db9-672e6efe507c","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120764,"groups":["Engineering","Project-Alpha"],"iat":1781120464,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:61892fb7-659f-8ab0-5ade-0e071764f1ff","preferred_username":"alice_lead","scope":"email profile","sid":"ZQj3MXR3Vt4Js5Az8jigv5m1","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"863c6069-2a1c-4790-9db9-672e6efe507c","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"863c6069-2a1c-4790-9db9-672e6efe507c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"863c6069-2a1c-4790-9db9-672e6efe507c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"info","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"863c6069-2a1c-4790-9db9-672e6efe507c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"863c6069-2a1c-4790-9db9-672e6efe507c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8de7909-3792-4d20-9bff-691bdad0b912","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:5962","PortSpecifier":{"PortValue":5962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8de7909-3792-4d20-9bff-691bdad0b912","method":"DELETE","path":"/maas-api/v1/api-keys/6bd69c4c-3940-4ae0-b431-79d9a8a6dd8a","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8de7909-3792-4d20-9bff-691bdad0b912","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:5962","PortSpecifier":{"PortValue":5962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120464,"nanos":633795409},"http":{"id":"d8de7909-3792-4d20-9bff-691bdad0b912","method":"DELETE","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/6bd69c4c-3940-4ae0-b431-79d9a8a6dd8a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8de7909-3792-4d20-9bff-691bdad0b912","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120764,"groups":["Engineering","Project-Alpha"],"iat":1781120464,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:61892fb7-659f-8ab0-5ade-0e071764f1ff","preferred_username":"alice_lead","scope":"email profile","sid":"ZQj3MXR3Vt4Js5Az8jigv5m1","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8de7909-3792-4d20-9bff-691bdad0b912","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120764,"groups":["Engineering","Project-Alpha"],"iat":1781120464,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:61892fb7-659f-8ab0-5ade-0e071764f1ff","preferred_username":"alice_lead","scope":"email profile","sid":"ZQj3MXR3Vt4Js5Az8jigv5m1","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/6bd69c4c-3940-4ae0-b431-79d9a8a6dd8a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8de7909-3792-4d20-9bff-691bdad0b912","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8de7909-3792-4d20-9bff-691bdad0b912","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8de7909-3792-4d20-9bff-691bdad0b912","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"info","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8de7909-3792-4d20-9bff-691bdad0b912","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8de7909-3792-4d20-9bff-691bdad0b912","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7045282-7d1b-4014-8b38-3e2f11fb9476","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:24738","PortSpecifier":{"PortValue":24738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7045282-7d1b-4014-8b38-3e2f11fb9476","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7045282-7d1b-4014-8b38-3e2f11fb9476","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:24738","PortSpecifier":{"PortValue":24738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120467,"nanos":665101607},"http":{"id":"c7045282-7d1b-4014-8b38-3e2f11fb9476","method":"GET","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7045282-7d1b-4014-8b38-3e2f11fb9476","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4PESZ3ew70AeoneG_IOfnBKzqHmSLxId746PRWZmJELBrviuEqjKQ9UESS9A"} {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c7045282-7d1b-4014-8b38-3e2f11fb9476","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4PESZ3ew70AeoneG_IOfnBKzqHmSLxId746PRWZmJELBrviuEqjKQ9UESS9A\"}"} {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c7045282-7d1b-4014-8b38-3e2f11fb9476","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}} {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7045282-7d1b-4014-8b38-3e2f11fb9476","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c7045282-7d1b-4014-8b38-3e2f11fb9476","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"no such key: groups"} {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c7045282-7d1b-4014-8b38-3e2f11fb9476","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"no such key: username"} {"level":"info","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7045282-7d1b-4014-8b38-3e2f11fb9476","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7045282-7d1b-4014-8b38-3e2f11fb9476","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a3d3d83-20d1-4ada-ba21-e2b18e632f2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:60348","PortSpecifier":{"PortValue":60348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a3d3d83-20d1-4ada-ba21-e2b18e632f2c","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a3d3d83-20d1-4ada-ba21-e2b18e632f2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:60348","PortSpecifier":{"PortValue":60348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120467,"nanos":798275892},"http":{"id":"7a3d3d83-20d1-4ada-ba21-e2b18e632f2c","method":"POST","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"7a3d3d83-20d1-4ada-ba21-e2b18e632f2c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7a3d3d83-20d1-4ada-ba21-e2b18e632f2c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"7a3d3d83-20d1-4ada-ba21-e2b18e632f2c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"not authenticated"} {"level":"info","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a3d3d83-20d1-4ada-ba21-e2b18e632f2c","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}"}} {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a3d3d83-20d1-4ada-ba21-e2b18e632f2c","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}} {"level":"info","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75edd154-846d-4b97-80e7-cf90c4b5f8ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:5970","PortSpecifier":{"PortValue":5970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75edd154-846d-4b97-80e7-cf90c4b5f8ea","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75edd154-846d-4b97-80e7-cf90c4b5f8ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:5970","PortSpecifier":{"PortValue":5970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120467,"nanos":970594905},"http":{"id":"75edd154-846d-4b97-80e7-cf90c4b5f8ea","method":"POST","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75edd154-846d-4b97-80e7-cf90c4b5f8ea","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120767,"groups":["Engineering","Project-Alpha"],"iat":1781120467,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2c03ec14-7b6f-421f-32e7-c10fb5e71e72","preferred_username":"alice_lead","scope":"email profile","sid":"9AZX2H3BCITc4siDjFGJ66ne","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}} {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75edd154-846d-4b97-80e7-cf90c4b5f8ea","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120767,"groups":["Engineering","Project-Alpha"],"iat":1781120467,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:2c03ec14-7b6f-421f-32e7-c10fb5e71e72","preferred_username":"alice_lead","scope":"email profile","sid":"9AZX2H3BCITc4siDjFGJ66ne","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75edd154-846d-4b97-80e7-cf90c4b5f8ea","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75edd154-846d-4b97-80e7-cf90c4b5f8ea","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75edd154-846d-4b97-80e7-cf90c4b5f8ea","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"info","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75edd154-846d-4b97-80e7-cf90c4b5f8ea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75edd154-846d-4b97-80e7-cf90c4b5f8ea","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fda4ab21-7a00-4aca-b7eb-b1098fa6cd41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:24746","PortSpecifier":{"PortValue":24746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fda4ab21-7a00-4aca-b7eb-b1098fa6cd41","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fda4ab21-7a00-4aca-b7eb-b1098fa6cd41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:24746","PortSpecifier":{"PortValue":24746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120467,"nanos":995311424},"http":{"id":"fda4ab21-7a00-4aca-b7eb-b1098fa6cd41","method":"POST","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fda4ab21-7a00-4aca-b7eb-b1098fa6cd41","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120767,"groups":["Site-Reliability"],"iat":1781120467,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:d1ee941c-77b6-2573-9869-0c72bb821824","preferred_username":"bob_sre","scope":"email profile","sid":"lM9NnJE5-XaQYn4amtVoegkP","sub":"edd13d92-955b-44ab-b9c5-9959ccd50d08","typ":"Bearer"}} {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fda4ab21-7a00-4aca-b7eb-b1098fa6cd41","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120767,"groups":["Site-Reliability"],"iat":1781120467,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:d1ee941c-77b6-2573-9869-0c72bb821824","preferred_username":"bob_sre","scope":"email profile","sid":"lM9NnJE5-XaQYn4amtVoegkP","sub":"edd13d92-955b-44ab-b9c5-9959ccd50d08","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fda4ab21-7a00-4aca-b7eb-b1098fa6cd41","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fda4ab21-7a00-4aca-b7eb-b1098fa6cd41","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"} {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fda4ab21-7a00-4aca-b7eb-b1098fa6cd41","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"} {"level":"info","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fda4ab21-7a00-4aca-b7eb-b1098fa6cd41","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fda4ab21-7a00-4aca-b7eb-b1098fa6cd41","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4b0c2d5-020f-4061-aad4-42c973fa1c6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:60352","PortSpecifier":{"PortValue":60352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4b0c2d5-020f-4061-aad4-42c973fa1c6f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4b0c2d5-020f-4061-aad4-42c973fa1c6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:60352","PortSpecifier":{"PortValue":60352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120468,"nanos":91833052},"http":{"id":"a4b0c2d5-020f-4061-aad4-42c973fa1c6f","method":"POST","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4b0c2d5-020f-4061-aad4-42c973fa1c6f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120768,"groups":["Engineering","Project-Alpha"],"iat":1781120468,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:0a5ac5a9-1d8c-3030-456f-e40dc648c51f","preferred_username":"alice_lead","scope":"email profile","sid":"y6ZCV6CBn1VEMWw3_hFo62sF","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4b0c2d5-020f-4061-aad4-42c973fa1c6f","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120768,"groups":["Engineering","Project-Alpha"],"iat":1781120468,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:0a5ac5a9-1d8c-3030-456f-e40dc648c51f","preferred_username":"alice_lead","scope":"email profile","sid":"y6ZCV6CBn1VEMWw3_hFo62sF","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4b0c2d5-020f-4061-aad4-42c973fa1c6f","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4b0c2d5-020f-4061-aad4-42c973fa1c6f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4b0c2d5-020f-4061-aad4-42c973fa1c6f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4b0c2d5-020f-4061-aad4-42c973fa1c6f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4b0c2d5-020f-4061-aad4-42c973fa1c6f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e39e2dcc-9077-4e2f-a112-13df08f0a098","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41548","PortSpecifier":{"PortValue":41548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e39e2dcc-9077-4e2f-a112-13df08f0a098","method":"DELETE","path":"/maas-api/v1/api-keys/5c36cf43-bf33-43e9-81e8-b27ae7350b13","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e39e2dcc-9077-4e2f-a112-13df08f0a098","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41548","PortSpecifier":{"PortValue":41548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120468,"nanos":120335810},"http":{"id":"e39e2dcc-9077-4e2f-a112-13df08f0a098","method":"DELETE","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/5c36cf43-bf33-43e9-81e8-b27ae7350b13",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e39e2dcc-9077-4e2f-a112-13df08f0a098","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120768,"groups":["Engineering","Project-Alpha"],"iat":1781120468,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:0a5ac5a9-1d8c-3030-456f-e40dc648c51f","preferred_username":"alice_lead","scope":"email profile","sid":"y6ZCV6CBn1VEMWw3_hFo62sF","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e39e2dcc-9077-4e2f-a112-13df08f0a098","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120768,"groups":["Engineering","Project-Alpha"],"iat":1781120468,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:0a5ac5a9-1d8c-3030-456f-e40dc648c51f","preferred_username":"alice_lead","scope":"email profile","sid":"y6ZCV6CBn1VEMWw3_hFo62sF","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/5c36cf43-bf33-43e9-81e8-b27ae7350b13",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e39e2dcc-9077-4e2f-a112-13df08f0a098","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e39e2dcc-9077-4e2f-a112-13df08f0a098","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e39e2dcc-9077-4e2f-a112-13df08f0a098","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e39e2dcc-9077-4e2f-a112-13df08f0a098","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e39e2dcc-9077-4e2f-a112-13df08f0a098","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"353d04fd-647d-468a-a236-0ba6b8ec6ec2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:2958","PortSpecifier":{"PortValue":2958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"353d04fd-647d-468a-a236-0ba6b8ec6ec2","method":"DELETE","path":"/maas-api/v1/api-keys/5c36cf43-bf33-43e9-81e8-b27ae7350b13","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"353d04fd-647d-468a-a236-0ba6b8ec6ec2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:2958","PortSpecifier":{"PortValue":2958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120468,"nanos":147417084},"http":{"id":"353d04fd-647d-468a-a236-0ba6b8ec6ec2","method":"DELETE","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/5c36cf43-bf33-43e9-81e8-b27ae7350b13",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"353d04fd-647d-468a-a236-0ba6b8ec6ec2","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120768,"groups":["Engineering","Project-Alpha"],"iat":1781120468,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:0a5ac5a9-1d8c-3030-456f-e40dc648c51f","preferred_username":"alice_lead","scope":"email profile","sid":"y6ZCV6CBn1VEMWw3_hFo62sF","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"353d04fd-647d-468a-a236-0ba6b8ec6ec2","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120768,"groups":["Engineering","Project-Alpha"],"iat":1781120468,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:0a5ac5a9-1d8c-3030-456f-e40dc648c51f","preferred_username":"alice_lead","scope":"email profile","sid":"y6ZCV6CBn1VEMWw3_hFo62sF","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/5c36cf43-bf33-43e9-81e8-b27ae7350b13",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"353d04fd-647d-468a-a236-0ba6b8ec6ec2","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"353d04fd-647d-468a-a236-0ba6b8ec6ec2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"353d04fd-647d-468a-a236-0ba6b8ec6ec2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"353d04fd-647d-468a-a236-0ba6b8ec6ec2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"353d04fd-647d-468a-a236-0ba6b8ec6ec2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e1b067e-49cb-4caf-835c-6cc12edc758a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:8162","PortSpecifier":{"PortValue":8162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e1b067e-49cb-4caf-835c-6cc12edc758a","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e1b067e-49cb-4caf-835c-6cc12edc758a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:8162","PortSpecifier":{"PortValue":8162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120468,"nanos":235411817},"http":{"id":"3e1b067e-49cb-4caf-835c-6cc12edc758a","method":"POST","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e1b067e-49cb-4caf-835c-6cc12edc758a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120768,"groups":["Engineering","Project-Alpha"],"iat":1781120468,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ca91ea79-87ee-0fd2-4c32-9e17a6d8f2e5","preferred_username":"alice_lead","scope":"email profile","sid":"pdxlEa30zocyYQ2XFajFl_MW","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e1b067e-49cb-4caf-835c-6cc12edc758a","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120768,"groups":["Engineering","Project-Alpha"],"iat":1781120468,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ca91ea79-87ee-0fd2-4c32-9e17a6d8f2e5","preferred_username":"alice_lead","scope":"email profile","sid":"pdxlEa30zocyYQ2XFajFl_MW","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e1b067e-49cb-4caf-835c-6cc12edc758a","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e1b067e-49cb-4caf-835c-6cc12edc758a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e1b067e-49cb-4caf-835c-6cc12edc758a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e1b067e-49cb-4caf-835c-6cc12edc758a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e1b067e-49cb-4caf-835c-6cc12edc758a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe4fd9b9-6abb-483f-b63f-5bf1730d8eef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41560","PortSpecifier":{"PortValue":41560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe4fd9b9-6abb-483f-b63f-5bf1730d8eef","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe4fd9b9-6abb-483f-b63f-5bf1730d8eef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41560","PortSpecifier":{"PortValue":41560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120468,"nanos":260096235},"http":{"id":"fe4fd9b9-6abb-483f-b63f-5bf1730d8eef","method":"GET","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe4fd9b9-6abb-483f-b63f-5bf1730d8eef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NgpkdfnabFGqnVf4_IBdJoK7VT71DJsYnGQ0AhMCxZcAOwUB88CQ60zyvlhi"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fe4fd9b9-6abb-483f-b63f-5bf1730d8eef","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NgpkdfnabFGqnVf4_IBdJoK7VT71DJsYnGQ0AhMCxZcAOwUB88CQ60zyvlhi\"}"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fe4fd9b9-6abb-483f-b63f-5bf1730d8eef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe4fd9b9-6abb-483f-b63f-5bf1730d8eef","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe4fd9b9-6abb-483f-b63f-5bf1730d8eef","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe4fd9b9-6abb-483f-b63f-5bf1730d8eef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe4fd9b9-6abb-483f-b63f-5bf1730d8eef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe4fd9b9-6abb-483f-b63f-5bf1730d8eef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe4fd9b9-6abb-483f-b63f-5bf1730d8eef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8ea7b07-d749-4054-9647-5fa71eb2a629","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:34620","PortSpecifier":{"PortValue":34620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8ea7b07-d749-4054-9647-5fa71eb2a629","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8ea7b07-d749-4054-9647-5fa71eb2a629","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:34620","PortSpecifier":{"PortValue":34620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120468,"nanos":265698388},"http":{"id":"c8ea7b07-d749-4054-9647-5fa71eb2a629","method":"GET","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8ea7b07-d749-4054-9647-5fa71eb2a629","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NgpkdfnabFGqnVf4_IBdJoK7VT71DJsYnGQ0AhMCxZcAOwUB88CQ60zyvlhi"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8ea7b07-d749-4054-9647-5fa71eb2a629","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NgpkdfnabFGqnVf4_IBdJoK7VT71DJsYnGQ0AhMCxZcAOwUB88CQ60zyvlhi\"}"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8ea7b07-d749-4054-9647-5fa71eb2a629","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8ea7b07-d749-4054-9647-5fa71eb2a629","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8ea7b07-d749-4054-9647-5fa71eb2a629","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8ea7b07-d749-4054-9647-5fa71eb2a629","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-1NgpkdfnabFGqnVf4_IBdJoK7VT71DJsYnGQ0AhMCxZcAOwUB88CQ60zyvlhi","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.32","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.27~maas-default-gateway-openshift-default-687ff6996-csnqm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.133.0.32","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"c8ea7b07-d749-4054-9647-5fa71eb2a629"},"host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","id":"c8ea7b07-d749-4054-9647-5fa71eb2a629","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":265698388,"seconds":1781120468},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.133.0.32:34620","port":34620}}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8ea7b07-d749-4054-9647-5fa71eb2a629","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8ea7b07-d749-4054-9647-5fa71eb2a629","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8ea7b07-d749-4054-9647-5fa71eb2a629","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8ea7b07-d749-4054-9647-5fa71eb2a629","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8ea7b07-d749-4054-9647-5fa71eb2a629","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8ea7b07-d749-4054-9647-5fa71eb2a629","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"85ac889c-d320-48ff-a984-d31959307da2","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8ea7b07-d749-4054-9647-5fa71eb2a629","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8ea7b07-d749-4054-9647-5fa71eb2a629","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"587138a2-e166-4149-b2af-3181313df2b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:2960","PortSpecifier":{"PortValue":2960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"587138a2-e166-4149-b2af-3181313df2b2","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"587138a2-e166-4149-b2af-3181313df2b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:2960","PortSpecifier":{"PortValue":2960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120468,"nanos":357648612},"http":{"id":"587138a2-e166-4149-b2af-3181313df2b2","method":"POST","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"587138a2-e166-4149-b2af-3181313df2b2","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120768,"groups":["Engineering","Project-Alpha"],"iat":1781120468,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:c3f973fc-15eb-601e-ab6a-c68853e390d9","preferred_username":"alice_lead","scope":"email profile","sid":"hd1D0E76H2oACjszuIDg8qvR","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"587138a2-e166-4149-b2af-3181313df2b2","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120768,"groups":["Engineering","Project-Alpha"],"iat":1781120468,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:c3f973fc-15eb-601e-ab6a-c68853e390d9","preferred_username":"alice_lead","scope":"email profile","sid":"hd1D0E76H2oACjszuIDg8qvR","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"587138a2-e166-4149-b2af-3181313df2b2","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"587138a2-e166-4149-b2af-3181313df2b2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"587138a2-e166-4149-b2af-3181313df2b2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"587138a2-e166-4149-b2af-3181313df2b2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"587138a2-e166-4149-b2af-3181313df2b2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a872d76-c8e2-481d-9eae-bc1e05ff97d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:5980","PortSpecifier":{"PortValue":5980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a872d76-c8e2-481d-9eae-bc1e05ff97d8","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a872d76-c8e2-481d-9eae-bc1e05ff97d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:5980","PortSpecifier":{"PortValue":5980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120468,"nanos":389467833},"http":{"id":"8a872d76-c8e2-481d-9eae-bc1e05ff97d8","method":"GET","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a872d76-c8e2-481d-9eae-bc1e05ff97d8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GHjt9gWp4Dzonc05_TY9t5Sc5cDuabkyDGOfN4e94PQfgykXlFPQdydT4tT2"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a872d76-c8e2-481d-9eae-bc1e05ff97d8","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GHjt9gWp4Dzonc05_TY9t5Sc5cDuabkyDGOfN4e94PQfgykXlFPQdydT4tT2\"}"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a872d76-c8e2-481d-9eae-bc1e05ff97d8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a872d76-c8e2-481d-9eae-bc1e05ff97d8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a872d76-c8e2-481d-9eae-bc1e05ff97d8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a872d76-c8e2-481d-9eae-bc1e05ff97d8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a872d76-c8e2-481d-9eae-bc1e05ff97d8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a872d76-c8e2-481d-9eae-bc1e05ff97d8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a872d76-c8e2-481d-9eae-bc1e05ff97d8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e43a3c7f-6258-49c9-8300-abf3d406b154","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:24752","PortSpecifier":{"PortValue":24752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e43a3c7f-6258-49c9-8300-abf3d406b154","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e43a3c7f-6258-49c9-8300-abf3d406b154","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:24752","PortSpecifier":{"PortValue":24752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120468,"nanos":411773537},"http":{"id":"e43a3c7f-6258-49c9-8300-abf3d406b154","method":"GET","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e43a3c7f-6258-49c9-8300-abf3d406b154","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GHjt9gWp4Dzonc05_TY9t5Sc5cDuabkyDGOfN4e94PQfgykXlFPQdydT4tT2"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e43a3c7f-6258-49c9-8300-abf3d406b154","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GHjt9gWp4Dzonc05_TY9t5Sc5cDuabkyDGOfN4e94PQfgykXlFPQdydT4tT2\"}"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e43a3c7f-6258-49c9-8300-abf3d406b154","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e43a3c7f-6258-49c9-8300-abf3d406b154","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e43a3c7f-6258-49c9-8300-abf3d406b154","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e43a3c7f-6258-49c9-8300-abf3d406b154","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e43a3c7f-6258-49c9-8300-abf3d406b154","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e43a3c7f-6258-49c9-8300-abf3d406b154","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e43a3c7f-6258-49c9-8300-abf3d406b154","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27706ca0-7e4e-4c10-acca-2b5657690390","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:34620","PortSpecifier":{"PortValue":34620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27706ca0-7e4e-4c10-acca-2b5657690390","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27706ca0-7e4e-4c10-acca-2b5657690390","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:34620","PortSpecifier":{"PortValue":34620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120468,"nanos":416651056},"http":{"id":"27706ca0-7e4e-4c10-acca-2b5657690390","method":"GET","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27706ca0-7e4e-4c10-acca-2b5657690390","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GHjt9gWp4Dzonc05_TY9t5Sc5cDuabkyDGOfN4e94PQfgykXlFPQdydT4tT2"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27706ca0-7e4e-4c10-acca-2b5657690390","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GHjt9gWp4Dzonc05_TY9t5Sc5cDuabkyDGOfN4e94PQfgykXlFPQdydT4tT2\"}"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27706ca0-7e4e-4c10-acca-2b5657690390","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27706ca0-7e4e-4c10-acca-2b5657690390","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27706ca0-7e4e-4c10-acca-2b5657690390","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27706ca0-7e4e-4c10-acca-2b5657690390","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-1GHjt9gWp4Dzonc05_TY9t5Sc5cDuabkyDGOfN4e94PQfgykXlFPQdydT4tT2","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.32","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.27~maas-default-gateway-openshift-default-687ff6996-csnqm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.133.0.32","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"27706ca0-7e4e-4c10-acca-2b5657690390"},"host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","id":"27706ca0-7e4e-4c10-acca-2b5657690390","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":416651056,"seconds":1781120468},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.133.0.32:34620","port":34620}}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27706ca0-7e4e-4c10-acca-2b5657690390","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27706ca0-7e4e-4c10-acca-2b5657690390","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27706ca0-7e4e-4c10-acca-2b5657690390","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27706ca0-7e4e-4c10-acca-2b5657690390","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27706ca0-7e4e-4c10-acca-2b5657690390","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27706ca0-7e4e-4c10-acca-2b5657690390","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"1757f59f-3950-4029-b406-2669f9a693c6","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27706ca0-7e4e-4c10-acca-2b5657690390","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27706ca0-7e4e-4c10-acca-2b5657690390","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e21c5de9-0c4b-47f2-b123-45a60d36cbf2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:60366","PortSpecifier":{"PortValue":60366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e21c5de9-0c4b-47f2-b123-45a60d36cbf2","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e21c5de9-0c4b-47f2-b123-45a60d36cbf2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:60366","PortSpecifier":{"PortValue":60366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120468,"nanos":513337251},"http":{"id":"e21c5de9-0c4b-47f2-b123-45a60d36cbf2","method":"POST","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e21c5de9-0c4b-47f2-b123-45a60d36cbf2","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120768,"groups":["Engineering","Project-Alpha"],"iat":1781120468,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7ccc67c6-fb3b-82f5-4652-c560b36c9a46","preferred_username":"alice_lead","scope":"email profile","sid":"3j64ou0mgNFGuwcsExPeX2G6","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e21c5de9-0c4b-47f2-b123-45a60d36cbf2","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120768,"groups":["Engineering","Project-Alpha"],"iat":1781120468,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7ccc67c6-fb3b-82f5-4652-c560b36c9a46","preferred_username":"alice_lead","scope":"email profile","sid":"3j64ou0mgNFGuwcsExPeX2G6","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e21c5de9-0c4b-47f2-b123-45a60d36cbf2","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e21c5de9-0c4b-47f2-b123-45a60d36cbf2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e21c5de9-0c4b-47f2-b123-45a60d36cbf2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e21c5de9-0c4b-47f2-b123-45a60d36cbf2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e21c5de9-0c4b-47f2-b123-45a60d36cbf2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7af06aba-4007-4a3d-9175-12e55e37acf6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:5992","PortSpecifier":{"PortValue":5992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7af06aba-4007-4a3d-9175-12e55e37acf6","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7af06aba-4007-4a3d-9175-12e55e37acf6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:5992","PortSpecifier":{"PortValue":5992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120468,"nanos":541689974},"http":{"id":"7af06aba-4007-4a3d-9175-12e55e37acf6","method":"GET","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7af06aba-4007-4a3d-9175-12e55e37acf6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-c83qQVmrd6TGvk17_7YZAUPZpygBf4ebFORNKkKWnU5I6SVzdaESn4CpUmjI"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7af06aba-4007-4a3d-9175-12e55e37acf6","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-c83qQVmrd6TGvk17_7YZAUPZpygBf4ebFORNKkKWnU5I6SVzdaESn4CpUmjI\"}"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7af06aba-4007-4a3d-9175-12e55e37acf6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7af06aba-4007-4a3d-9175-12e55e37acf6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7af06aba-4007-4a3d-9175-12e55e37acf6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7af06aba-4007-4a3d-9175-12e55e37acf6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7af06aba-4007-4a3d-9175-12e55e37acf6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7af06aba-4007-4a3d-9175-12e55e37acf6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7af06aba-4007-4a3d-9175-12e55e37acf6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03db0bda-9003-45b3-9487-cd34d0811586","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:34620","PortSpecifier":{"PortValue":34620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03db0bda-9003-45b3-9487-cd34d0811586","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03db0bda-9003-45b3-9487-cd34d0811586","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:34620","PortSpecifier":{"PortValue":34620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120468,"nanos":546987294},"http":{"id":"03db0bda-9003-45b3-9487-cd34d0811586","method":"GET","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03db0bda-9003-45b3-9487-cd34d0811586","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-c83qQVmrd6TGvk17_7YZAUPZpygBf4ebFORNKkKWnU5I6SVzdaESn4CpUmjI"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03db0bda-9003-45b3-9487-cd34d0811586","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-c83qQVmrd6TGvk17_7YZAUPZpygBf4ebFORNKkKWnU5I6SVzdaESn4CpUmjI\"}"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03db0bda-9003-45b3-9487-cd34d0811586","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03db0bda-9003-45b3-9487-cd34d0811586","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03db0bda-9003-45b3-9487-cd34d0811586","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03db0bda-9003-45b3-9487-cd34d0811586","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-c83qQVmrd6TGvk17_7YZAUPZpygBf4ebFORNKkKWnU5I6SVzdaESn4CpUmjI","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.32","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.27~maas-default-gateway-openshift-default-687ff6996-csnqm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.133.0.32","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"03db0bda-9003-45b3-9487-cd34d0811586"},"host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","id":"03db0bda-9003-45b3-9487-cd34d0811586","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":546987294,"seconds":1781120468},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.133.0.32:34620","port":34620}}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03db0bda-9003-45b3-9487-cd34d0811586","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03db0bda-9003-45b3-9487-cd34d0811586","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03db0bda-9003-45b3-9487-cd34d0811586","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03db0bda-9003-45b3-9487-cd34d0811586","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03db0bda-9003-45b3-9487-cd34d0811586","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03db0bda-9003-45b3-9487-cd34d0811586","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"4a538662-f1ce-4ac9-97aa-07eda5209203","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03db0bda-9003-45b3-9487-cd34d0811586","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03db0bda-9003-45b3-9487-cd34d0811586","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2210b4bc-a53c-4929-abf1-64315109ec54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:24764","PortSpecifier":{"PortValue":24764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2210b4bc-a53c-4929-abf1-64315109ec54","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2210b4bc-a53c-4929-abf1-64315109ec54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:24764","PortSpecifier":{"PortValue":24764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120468,"nanos":576371978},"http":{"id":"2210b4bc-a53c-4929-abf1-64315109ec54","method":"GET","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2210b4bc-a53c-4929-abf1-64315109ec54","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-c83qQVmrd6TGvk17_7YZAUPZpygBf4ebFORNKkKWnU5I6SVzdaESn4CpUmjI"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2210b4bc-a53c-4929-abf1-64315109ec54","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-c83qQVmrd6TGvk17_7YZAUPZpygBf4ebFORNKkKWnU5I6SVzdaESn4CpUmjI\"}"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2210b4bc-a53c-4929-abf1-64315109ec54","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2210b4bc-a53c-4929-abf1-64315109ec54","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2210b4bc-a53c-4929-abf1-64315109ec54","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2210b4bc-a53c-4929-abf1-64315109ec54","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2210b4bc-a53c-4929-abf1-64315109ec54","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2210b4bc-a53c-4929-abf1-64315109ec54","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2210b4bc-a53c-4929-abf1-64315109ec54","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ea899f2-c134-4b27-bb02-7d3c09d34499","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:34620","PortSpecifier":{"PortValue":34620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ea899f2-c134-4b27-bb02-7d3c09d34499","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ea899f2-c134-4b27-bb02-7d3c09d34499","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:34620","PortSpecifier":{"PortValue":34620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120468,"nanos":581511502},"http":{"id":"5ea899f2-c134-4b27-bb02-7d3c09d34499","method":"GET","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ea899f2-c134-4b27-bb02-7d3c09d34499","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-c83qQVmrd6TGvk17_7YZAUPZpygBf4ebFORNKkKWnU5I6SVzdaESn4CpUmjI"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ea899f2-c134-4b27-bb02-7d3c09d34499","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-c83qQVmrd6TGvk17_7YZAUPZpygBf4ebFORNKkKWnU5I6SVzdaESn4CpUmjI\"}"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ea899f2-c134-4b27-bb02-7d3c09d34499","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ea899f2-c134-4b27-bb02-7d3c09d34499","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ea899f2-c134-4b27-bb02-7d3c09d34499","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ea899f2-c134-4b27-bb02-7d3c09d34499","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-c83qQVmrd6TGvk17_7YZAUPZpygBf4ebFORNKkKWnU5I6SVzdaESn4CpUmjI","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.32","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.27~maas-default-gateway-openshift-default-687ff6996-csnqm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.133.0.32","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"5ea899f2-c134-4b27-bb02-7d3c09d34499"},"host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","id":"5ea899f2-c134-4b27-bb02-7d3c09d34499","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":581511502,"seconds":1781120468},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.133.0.32:34620","port":34620}}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ea899f2-c134-4b27-bb02-7d3c09d34499","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ea899f2-c134-4b27-bb02-7d3c09d34499","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ea899f2-c134-4b27-bb02-7d3c09d34499","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ea899f2-c134-4b27-bb02-7d3c09d34499","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ea899f2-c134-4b27-bb02-7d3c09d34499","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ea899f2-c134-4b27-bb02-7d3c09d34499","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"4a538662-f1ce-4ac9-97aa-07eda5209203","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ea899f2-c134-4b27-bb02-7d3c09d34499","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ea899f2-c134-4b27-bb02-7d3c09d34499","authorized":true,"response":"OK"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11893ac2-2fce-47fa-bcb2-e82a12906f2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:60380","PortSpecifier":{"PortValue":60380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11893ac2-2fce-47fa-bcb2-e82a12906f2a","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11893ac2-2fce-47fa-bcb2-e82a12906f2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:60380","PortSpecifier":{"PortValue":60380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781120468,"nanos":685924663},"http":{"id":"11893ac2-2fce-47fa-bcb2-e82a12906f2a","method":"POST","headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11893ac2-2fce-47fa-bcb2-e82a12906f2a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120768,"groups":["Engineering","Project-Alpha"],"iat":1781120468,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:c67d2577-f1db-1c09-7162-74dc4e57b820","preferred_username":"alice_lead","scope":"email profile","sid":"0-VjXD_f-IkhSQUMcNIiI-SV","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11893ac2-2fce-47fa-bcb2-e82a12906f2a","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781120768,"groups":["Engineering","Project-Alpha"],"iat":1781120468,"iss":"https://keycloak.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:c67d2577-f1db-1c09-7162-74dc4e57b820","preferred_username":"alice_lead","scope":"email profile","sid":"0-VjXD_f-IkhSQUMcNIiI-SV","sub":"4129b135-aa29-4271-9647-bde1f46637f6","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b9694ef3-a508-4eeb-951a-54f36fb5aa62.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11893ac2-2fce-47fa-bcb2-e82a12906f2a","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11893ac2-2fce-47fa-bcb2-e82a12906f2a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11893ac2-2fce-47fa-bcb2-e82a12906f2a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"info","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11893ac2-2fce-47fa-bcb2-e82a12906f2a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-06-10T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11893ac2-2fce-47fa-bcb2-e82a12906f2a","authorized":true,"response":"OK"}