go version update

Addressing Issue: https://github.ibm.com/IBMPrivateCloud/roadmap/issues/64811

Patched the cluster (CS: 4.9) with the image.
daniyalmustafa@Daniyals-MBP ~ % oc get pod | grep ibm-iam-operator
ibm-iam-operator-5757cf9bc7-66n76                                1/1     Running     0          2m25s

Pod description:
daniyalmustafa@Daniyals-MBP ~ % oc describe pod ibm-iam-operator-5757cf9bc7-66n76
Name:             ibm-iam-operator-5757cf9bc7-66n76
Namespace:        ibm-common-services
Priority:         0
Service Account:  ibm-iam-operator
Node:             worker0.daniyal.cp.fyre.ibm.com/<IP_ADDRESS>
Start Time:       Fri, 20 Sep 2024 15:42:42 +0530
Labels:           app.kubernetes.io/instance=ibm-iam-operator
                  app.kubernetes.io/managed-by=ibm-iam-operator
                  app.kubernetes.io/name=ibm-iam-operator
                  intent=projected
                  name=ibm-iam-operator
                  pod-template-hash=5757cf9bc7
                  productName=IBM_Cloud_Platform_Common_Services
Annotations:      alm-examples:
                    [
                      {
                        "apiVersion": "operator.ibm.com/v1alpha1",
                        "kind": "Authentication",
                        "metadata": {
                          "labels": {
                            "app.kubernetes.io/instance": "ibm-iam-operator",
                            "app.kubernetes.io/managed-by": "ibm-iam-operator",
                            "app.kubernetes.io/name": "ibm-iam-operator"
                          },
                          "name": "example-authentication"
                        },
                        "spec": {
                          "auditService": {
                            "imageName": "auditService no longer used - ignore",
                            "imageRegistry": "auditService no longer used - ignore",
                            "imageTag": "auditService no longer used - ignore"
                          },
                          "authService": {
                            "imageName": "icp-platform-auth",
                            "imageRegistry": "icr.io/cpopen/cpfs",
                            "imageTag": "4.8.0",
                            "ldapsCACert": "platform-auth-ldaps-ca-cert",
                            "resources": {
                              "limits": {
                                "cpu": "1000m",
                                "ephemeral-storage": "650Mi",
                                "memory": "1Gi"
                              },
                              "requests": {
                                "cpu": "100m",
                                "ephemeral-storage": "400Mi",
                                "memory": "350Mi"
                              }
                            },
                            "routerCertSecret": "saml-auth-secret"
                          },
                          "clientRegistration": {
                            "imageName": "im-initcontainer",
                            "imageRegistry": "icr.io/cpopen/cpfs",
                            "imageTag": "4.8.0",
                            "resources": {
                              "limits": {
                                "cpu": "1000m",
                                "memory": "1Gi"
                              },
                              "requests": {
                                "cpu": "100m",
                                "ephemeral-storage": "158Mi",
                                "memory": "128Mi"
                              }
                            }
                          },
                          "config": {
                            "authUniqueHosts": "internal-ip1 internal-ip2 mycluster.icp",
                            "bootstrapUserId": "kubeadmin",
                            "claimsMap": "name=\"givenName\" family_name=\"givenName\" given_name=\"givenName\" preferred_username=\"displayName\" display_nam...
                            "claimsSupported": "name,family_name,display_name,given_name,preferred_username",
                            "clusterCADomain": "mycluster.icp",
                            "clusterExternalAddress": "<IP_ADDRESS>",
                            "clusterInternalAddress": "<IP_ADDRESS>",
                            "clusterName": "mycluster",
                            "defaultAdminPassword": "password",
                            "defaultAdminUser": "cpadmin",
                            "enableImpersonation": false,
                            "fipsEnabled": true,
                            "ibmCloudSaas": false,
                            "icpPort": 8443,
                            "installType": "fresh",
                            "isOpenshiftEnv": true,
                            "nonceEnabled": true,
                            "oidcIssuerURL": "https://<IP_ADDRESS>:443/idauth/oidc/endpoint/OP",
                            "openshiftPort": 443,
                            "preferredLogin": "",
                            "providerIssuerURL": "",
                            "roksEnabled": true,
                            "roksURL": "https://roks.domain.name:443",
                            "roksUserPrefix": "changeme",
                            "saasClientRedirectUrl": "",
                            "scimAdminPassword": "scimpassword",
                            "scimAdminUser": "scimadmin",
                            "scopeClaim": "profile=\"name,family_name,display_name,given_name,preferred_username\"",
                            "wlpClientID": "4444be3a738841016ab76d71b650e836",
                            "wlpClientRegistrationSecret": "f1362ca4d20b8389af2d1ea68042c9af",
                            "wlpClientSecret": "aa73bf39752053bf723d1143fb4cf8a2",
                            "xframeDomain": "",
                            "zenFrontDoor": false
                          },
                          "identityManager": {
                            "imageName": "icp-identity-manager",
                            "imageRegistry": "icr.io/cpopen/cpfs",
                            "imageTag": "4.8.0",
                            "masterNodesList": "<IP_ADDRESS>",
                            "resources": {
                              "limits": {
                                "cpu": "1000m",
                                "ephemeral-storage": "550Mi",
                                "memory": "1Gi"
                              },
                              "requests": {
                                "cpu": "50m",
                                "ephemeral-storage": "300Mi",
                                "memory": "150Mi"
                              }
                            }
                          },
                          "identityProvider": {
                            "imageName": "icp-identity-provider",
                            "imageRegistry": "icr.io/cpopen/cpfs",
                            "imageTag": "4.8.0",
                            "resources": {
                              "limits": {
                                "cpu": "1000m",
                                "ephemeral-storage": "550Mi",
                                "memory": "1Gi"
                              },
                              "requests": {
                                "cpu": "50m",
                                "ephemeral-storage": "300Mi",
                                "memory": "150Mi"
                              }
                            }
                          },
                          "initMongodb": {
                            "imageName": "im-initcontainer",
                            "imageRegistry": "icr.io/cpopen/cpfs",
                            "imageTag": "4.8.0",
                            "resources": {
                              "limits": {
                                "cpu": "100m",
                                "memory": "128Mi"
                              },
                              "requests": {
                                "cpu": "100m",
                                "ephemeral-storage": "178Mi",
                                "memory": "128Mi"
                              }
                            }
                          },
                          "operatorVersion": "0.14.1",
                          "replicas": 1
                        }
                      },
                      {
                        "apiVersion": "operator.ibm.com/v1alpha1",
                        "kind": "OperandBindInfo",
                        "metadata": {
                          "name": "ibm-iam-bindinfo"
                        },
                        "spec": {
                          "operand": "ibm-im-operator",
                          "registry": "common-service",
                          "description": "Binding information that should be accessible to iam adopters",
                          "bindings": {
                            "public-oidc-creds": {
                              "secret": "platform-oidc-credentials"
                            },
                            "public-auth-creds": {
                              "secret": "platform-auth-idp-credentials"
                            },
                            "public-scim-creds": {
                              "secret": "platform-auth-scim-credentials"
                            },
                            "public-auth-cert": {
                              "secret": "platform-auth-secret"
                            },
                            "public-cam-secret": {
                              "secret": "oauth-client-secret"
                            },
                            "public-cam-map": {
                              "configmap": "oauth-client-map"
                            },
                            "public-auth-config": {
                              "configmap": "platform-auth-idp"
                            },
                            "public-ibmcloud-config": {
                              "configmap": "ibmcloud-cluster-info"
                            },
                            "public-ibmcloudca-secret": {
                              "secret": "ibmcloud-cluster-ca-cert"
                            }
                          }
                        }
                      }
                    ]
                  capabilities: Basic Install
                  categories: Security
                  certified: false
                  containerImage: quay.io/daniyal_mustafa1/ibm-iam-operator:goUpdate
                  createdAt: 2024-09-03T14:43:05Z
                  description:
                    The IAM operator provides a simple Kubernetes CRD-Based API to manage the lifecycle of IAM services. With this operator, you can simply de...
                  k8s.ovn.org/pod-networks:
                    {"default":{"ip_addresses":["<IP_ADDRESS>/22"],"mac_address":"0a:58:0a:fe:17:dd","gateway_ips":["<IP_ADDRESS>"],"routes":[{"dest":"10.254....
                  k8s.v1.cni.cncf.io/network-status:
                    [{
                        "name": "ovn-kubernetes",
                        "interface": "eth0",
                        "ips": [
                            "<IP_ADDRESS>"
                        ],
                        "mac": "0a:58:0a:fe:17:dd",
                        "default": true,
                        "dns": {}
                    }]
                  olm.operatorGroup: common-service
                  olm.operatorNamespace: ibm-common-services
                  olm.skipRange: <4.8.0
                  olm.targetNamespaces: ibm-common-services
                  openshift.io/scc: restricted-v2
                  operatorframework.io/properties:
                    {"properties":[{"type":"olm.gvk","value":{"group":"oidc.security.ibm.com","kind":"Client","version":"v1"}},{"type":"olm.gvk","value":{"gro...
                  operators.operatorframework.io/builder: operator-sdk-v1.35.0
                  operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
                  productID: 068a62892a1e4db39641342e592daa25
                  productMetric: FREE
                  productName: IBM Cloud Platform Common Services
                  repository: https://github.com/IBM/ibm-iam-operator
                  seccomp.security.alpha.kubernetes.io/pod: runtime/default
                  support: IBM
Status:           Running
IP:               <IP_ADDRESS>
IPs:
  IP:           <IP_ADDRESS>
Controlled By:  ReplicaSet/ibm-iam-operator-5757cf9bc7
Containers:
  ibm-iam-operator:
    Container ID:  cri-o://0002c7c890b61a2fe988eac661204643a6fda83a0a90235dac2b51d4b44a3b2d
    Image:         quay.io/daniyal_mustafa1/ibm-iam-operator:goUpdate
    Image ID:      quay.io/daniyal_mustafa1/ibm-iam-operator@sha256:a3a67602c953851a2e7faeea10f933e0a922e41e074c2bada943f99cd7afced6
    Port:          <none>
    Host Port:     <none>
    Command:
      ibm-iam-operator
    State:          Running
      Started:      Fri, 20 Sep 2024 15:42:50 +0530
    Ready:          True
    Restart Count:  0
    Limits:
      cpu:     25m
      memory:  320Mi
    Requests:
      cpu:                20m
      ephemeral-storage:  256Mi
      memory:             80Mi
    Environment:
      WATCH_NAMESPACE:              <set to the key 'namespaces' of config map 'namespace-scope'>  Optional: false
      POD_NAME:                     ibm-iam-operator-5757cf9bc7-66n76 (v1:metadata.name)
      POD_NAMESPACE:                ibm-common-services (v1:metadata.namespace)
      OPERATOR_NAME:                ibm-iam-operator
      ROUTE_HTTP_PORT:
      ROUTE_HTTPS_PORT:
      cluster_name:
      ICP_PLATFORM_AUTH_IMAGE:      icr.io/cpopen/cpfs/icp-platform-auth@sha256:8a6104481011aab482a36a42e37e156e01fc8dbb946b26f854d0c657009f457f
      ICP_IDENTITY_PROVIDER_IMAGE:  icr.io/cpopen/cpfs/icp-identity-provider@sha256:8c9927a0adf997c1441c8ff62618bba0337c8ef4ec3f3193dbb83ee9aa238a82
      ICP_IDENTITY_MANAGER_IMAGE:   icr.io/cpopen/cpfs/icp-identity-manager@sha256:1b53719bb029499497e332fb38796478009ddb6679ffdc928e9a1892e6b6773c
      IM_INITCONTAINER_IMAGE:       icr.io/cpopen/cpfs/im-initcontainer@sha256:f8339ccbebb18efea015cf54ca41f5741f7ec60f682f0fbf5b75b935c2ffe0f3
      OPERATOR_CONDITION_NAME:      ibm-iam-operator.v4.8.0
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-b5l6p (ro)
Conditions:
  Type                        Status
  PodReadyToStartContainers   True
  Initialized                 True
  Ready                       True
  ContainersReady             True
  PodScheduled                True
Volumes:
  kube-api-access-b5l6p:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
    ConfigMapName:           openshift-service-ca.crt
    ConfigMapOptional:       <nil>
QoS Class:                   Burstable
Node-Selectors:              <none>
Tolerations:                 node.kubernetes.io/memory-pressure:NoSchedule op=Exists
                             node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type    Reason          Age    From               Message
  ----    ------          ----   ----               -------
  Normal  Scheduled       3m19s  default-scheduler  Successfully assigned ibm-common-services/ibm-iam-operator-5757cf9bc7-66n76 to worker0.daniyal.cp.fyre.ibm.com
  Normal  AddedInterface  3m19s  multus             Add eth0 [<IP_ADDRESS>/22] from ovn-kubernetes
  Normal  Pulled          3m19s  kubelet            Container image "quay.io/daniyal_mustafa1/ibm-iam-operator:goUpdate" already present on machine
  Normal  Created         3m13s  kubelet            Created container ibm-iam-operator
  Normal  Started         3m12s  kubelet            Started container ibm-iam-operator

Pod Logs:
daniyalmustafa@Daniyals-MBP ~ % oc logs -f ibm-iam-operator-5757cf9bc7-66n76 -c ibm-iam-operator
{"level":"info","ts":"2024-09-20T10:12:52Z","logger":"setup","msg":"starting manager"}
{"level":"info","ts":"2024-09-20T10:12:53Z","logger":"controller-runtime.metrics","msg":"Starting metrics server"}
{"level":"info","ts":"2024-09-20T10:12:53Z","logger":"controller-runtime.metrics","msg":"Serving metrics server","bindAddress":":8080","secure":false}
{"level":"info","ts":"2024-09-20T10:12:53Z","msg":"starting server","kind":"health probe","addr":"[::]:8081"}
{"level":"info","ts":"2024-09-20T10:12:53Z","msg":"Starting EventSource","controller":"client","controllerGroup":"oidc.security.ibm.com","controllerKind":"Client","source":"kind source: *v1.Client"}
{"level":"info","ts":"2024-09-20T10:12:53Z","msg":"Starting EventSource","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","source":"kind source: *v1alpha1.Authentication"}
{"level":"info","ts":"2024-09-20T10:12:53Z","msg":"Starting EventSource","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","source":"kind source: *v1.ConfigMap"}
{"level":"info","ts":"2024-09-20T10:12:53Z","msg":"Starting EventSource","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","source":"kind source: *v1.Secret"}
{"level":"info","ts":"2024-09-20T10:12:53Z","msg":"Starting EventSource","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","source":"kind source: *v1.Certificate"}
{"level":"info","ts":"2024-09-20T10:12:53Z","msg":"Starting EventSource","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","source":"kind source: *v1.Job"}
{"level":"info","ts":"2024-09-20T10:12:53Z","msg":"Starting EventSource","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","source":"kind source: *v1.Service"}
{"level":"info","ts":"2024-09-20T10:12:53Z","msg":"Starting EventSource","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","source":"kind source: *v1.Ingress"}
{"level":"info","ts":"2024-09-20T10:12:53Z","msg":"Starting EventSource","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","source":"kind source: *v1.Deployment"}
{"level":"info","ts":"2024-09-20T10:12:53Z","msg":"Starting EventSource","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","source":"kind source: *v1alpha1.OperandRequest"}
{"level":"info","ts":"2024-09-20T10:12:53Z","msg":"Starting Controller","controller":"client","controllerGroup":"oidc.security.ibm.com","controllerKind":"Client"}
{"level":"info","ts":"2024-09-20T10:12:53Z","msg":"Starting EventSource","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","source":"kind source: *v1.Route"}
{"level":"info","ts":"2024-09-20T10:12:53Z","msg":"Starting EventSource","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","source":"kind source: *zenv1.ZenExtension"}
{"level":"info","ts":"2024-09-20T10:12:53Z","msg":"Starting Controller","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication"}
{"level":"info","ts":"2024-09-20T10:13:07Z","msg":"Starting workers","controller":"client","controllerGroup":"oidc.security.ibm.com","controllerKind":"Client","worker count":1}
{"level":"info","ts":"2024-09-20T10:13:07Z","logger":"controller_oidc_client","msg":"Reconciling Client CR","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:07Z","logger":"controller_oidc_client","msg":"Add finalizer to Client if not already present","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"addFinalizer"}
{"level":"info","ts":"2024-09-20T10:13:07Z","logger":"controller_oidc_client","msg":"All Client finalizers were already set; skipping","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"addFinalizer"}
{"level":"info","ts":"2024-09-20T10:13:08Z","logger":"controller_oidc_client","msg":"Handle cleanup of Client if it has been marked for deletion","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"handleDeletion"}
{"level":"info","ts":"2024-09-20T10:13:08Z","logger":"controller_oidc_client","msg":"Client is not being deleted; skipping","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"handleDeletion"}
{"level":"info","ts":"2024-09-20T10:13:08Z","logger":"controller_oidc_client","msg":"Ensuring Secret and Client ID are set","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"ensureSecretAndClientIdSet"}
{"level":"info","ts":"2024-09-20T10:13:08Z","logger":"controller_oidc_client","msg":"Processing OIDC client registration","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"processOidcRegistration"}
{"level":"info","ts":"2024-09-20T10:13:08Z","logger":"controller_oidc_client","msg":"Deployment is available","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"processOidcRegistration","Deployment.Name":"platform-identity-provider","Deployment.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:09Z","msg":"Starting workers","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","worker count":1}
{"level":"info","ts":"2024-09-20T10:13:09Z","logger":"controller_authentication","msg":"Reconciling Authentication","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:09Z","logger":"controller_authentication","msg":"Add finalizers to MongoDB resources in case migration is needed","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"addFinalizers"}
{"level":"info","ts":"2024-09-20T10:13:09Z","logger":"controller_authentication","msg":"No MongoDB migration required, so no need for finalizers; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"addFinalizers"}
{"level":"info","ts":"2024-09-20T10:13:09Z","logger":"controller_authentication","msg":"Ensure that OperandRequest is updated with correct Operands","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleOperandRequest","OperandRequest.Name":"ibm-iam-request","OperandRequest.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:09Z","logger":"controller_authentication","msg":"No changes to OperandRequest; continue","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleOperandRequest","OperandRequest.Name":"ibm-iam-request","OperandRequest.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:09Z","logger":"controller_authentication","msg":"Clean up MongoDB resources if no longer being retained","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleRetainAnnotation"}
{"level":"info","ts":"2024-09-20T10:13:09Z","logger":"controller_authentication","msg":"Annotation does not signal a need to clean up resources; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleRetainAnnotation"}
{"level":"info","ts":"2024-09-20T10:13:09Z","logger":"controller_authentication","msg":"Create a CommonService CR for shared EDB claim","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:09Z","logger":"controller_authentication","msg":"CommonService CR for shared EDB claim already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","CommonServiceName":"im-common-service"}
{"level":"info","ts":"2024-09-20T10:13:09Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted serviceaccount","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:09Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted role","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:09Z","logger":"controller_authentication","msg":"Failed to create ibm-iam-operand-restricted role or its already present","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:09Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted RoleBinding","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:09Z","logger":"controller_authentication","msg":"Failed to create ibm-iam-operand-restricted RoleBinding or its already present","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:09Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:09Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:09Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:10Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:10Z","logger":"controller_authentication","msg":"Creating or updating new secret","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Certificate.Namespace":"ibm-common-services","Secret.Name":"ibmcloud-cluster-ca-cert"}
{"level":"info","ts":"2024-09-20T10:13:10Z","logger":"controller_authentication","msg":"Waiting for secret","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Certificate.Namespace":"ibm-common-services","Secret.Name":"platform-auth-secret"}
{"level":"info","ts":"2024-09-20T10:13:10Z","logger":"controller_oidc_client","msg":"Client found, update Client","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"processOidcRegistration"}
{"level":"info","ts":"2024-09-20T10:13:10Z","logger":"controller_authentication","msg":"Comparing calculated to observed secret","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Secret.Name":"ibmcloud-cluster-ca-cert"}
{"level":"info","ts":"2024-09-20T10:13:10Z","logger":"controller_authentication","msg":"No significant changes found; skipping update.","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Secret.Name":"ibmcloud-cluster-ca-cert"}
{"level":"info","ts":"2024-09-20T10:13:10Z","logger":"controller_authentication","msg":"Query global cm","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Configmap.Namespace":"ibm-common-services","ConfigMap.Name":"ibm-cpp-config"}
{"level":"info","ts":"2024-09-20T10:13:10Z","msg":"Get cluster config"}
{"level":"info","ts":"2024-09-20T10:13:10Z","msg":"Got services namespace","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:10Z","msg":"Create client to query for ConfigMap"}
{"level":"info","ts":"2024-09-20T10:13:10Z","msg":"Try to find ConfigMap","name":"ibm-cpp-config","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:10Z","msg":"Found ConfigMap","name":"ibm-cpp-config","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:10Z","msg":"Looked for kubernetes_cluster_type","ok":false,"value":"","clusterType":"OpenShift"}
{"level":"info","ts":"2024-09-20T10:13:10Z","logger":"controller_authentication","msg":"ibmcloud-cluster-info Configmap is already created by IM operator","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Configmap.Namespace":"ibm-common-services","ConfigMap.Name":"ibmcloud-cluster-info"}
{"level":"info","ts":"2024-09-20T10:13:10Z","logger":"controller_authentication","msg":"Current configmap","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Current Value":"true"}
{"level":"info","ts":"2024-09-20T10:13:10Z","logger":"controller_oidc_client","msg":"Client registration update successful","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:10Z","logger":"controller_oidc_client","msg":"Updating Client CR spec","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"processOidcRegistration"}
{"level":"info","ts":"2024-09-20T10:13:10Z","logger":"controller_oidc_client","msg":"Add any missing Client annotations to ibm-iam-operand-restricted ServiceAccount","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"annotateServiceAccount"}
{"level":"info","ts":"2024-09-20T10:13:10Z","logger":"controller_oidc_client","msg":"No new annotations to add to ServiceAccount ibm-iam-operand-restricted; skipping","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"annotateServiceAccount"}
{"level":"info","ts":"2024-09-20T10:13:10Z","logger":"controller_oidc_client","msg":"Processing Zen instance registration for Client, if configured","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"processZenRegistration"}
{"level":"info","ts":"2024-09-20T10:13:10Z","logger":"controller_oidc_client","msg":"Deployment is available","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"processZenRegistration","Deployment.Name":"platform-identity-management","Deployment.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Calculated new platform-oidc-registration.json","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"No ConfigMap update required","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted clusterrole","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Failed to create ibm-iam-operand-restricted clusterrole or its already present","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Ensure that the ClusterRoleBinding is created","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleClusterRoleBinding"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"ClusterRoleBinding already exists, continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleClusterRoleBinding","ClusterRoleBinding.Name":"ibm-iam-operand-restricted-ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"ibm-iam-operand-restricted SA is updated with annotation successfully","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Zen front door disabled","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleZenExtension","ZenExtension.Name":"iam-zen-extension","ZenExtension.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"ConfigMap found","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","ConfigMap.Name":"ibmcloud-cluster-info","ConfigMap.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"No changes to ConfigMap data fields needed","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","ConfigMap.Name":"ibmcloud-cluster-info","ConfigMap.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Zen front door has not been enabled, so IM Routes will be created","func":"ReconcileRoutes","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"ConfigMap found","func":"ReconcileRoutes","namespace":"ibm-common-services","ConfigMap.Name":"ibmcloud-cluster-info","ConfigMap.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Determined platform-id-auth Route should not exist; removing if present","func":"ReconcileRoutes","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Reconciling route","name":"platform-login","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/v1/auth/authorize?client_id=rq5py32hhtpkznngvqz07042pc5yj969&redirect_uri=https://cp-test-ibm-common-services.apps.daniyal.cp.fyre.ibm.com/auth/liberty/callback&response_type=code&scope=openid+email+profile&orig=/login","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-test-ibm-common-services.apps.daniyal.cp.fyre.ibm.com","routePath":"/login"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Comparing current and desired routes","name":"platform-login","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Routes are equal","name":"platform-login","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Reconciling route","name":"platform-oidc","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-test-ibm-common-services.apps.daniyal.cp.fyre.ibm.com","routePath":"/oidc"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Comparing current and desired routes","name":"platform-oidc","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Routes are equal","name":"platform-oidc","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Reconciling route","name":"saml-ui-callback","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/ibm/saml20/defaultSP/acs","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-test-ibm-common-services.apps.daniyal.cp.fyre.ibm.com","routePath":"/ibm/saml20/defaultSP/acs"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Comparing current and desired routes","name":"saml-ui-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Routes are equal","name":"saml-ui-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Reconciling route","name":"social-login-callback","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/ibm/api/social-login","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-test-ibm-common-services.apps.daniyal.cp.fyre.ibm.com","routePath":"/ibm/api/social-login"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Comparing current and desired routes","name":"social-login-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Routes are equal","name":"social-login-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Reconciling route","name":"id-mgmt","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-test-ibm-common-services.apps.daniyal.cp.fyre.ibm.com","routePath":"/idmgmt/"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Comparing current and desired routes","name":"id-mgmt","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Routes are equal","name":"id-mgmt","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Reconciling route","name":"platform-auth","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/v1/auth/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-test-ibm-common-services.apps.daniyal.cp.fyre.ibm.com","routePath":"/v1/auth/"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Comparing current and desired routes","name":"platform-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Routes are equal","name":"platform-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Reconciling route","name":"platform-id-provider","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-test-ibm-common-services.apps.daniyal.cp.fyre.ibm.com","routePath":"/idprovider/"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Comparing current and desired routes","name":"platform-id-provider","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Routes are equal","name":"platform-id-provider","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Ensure EDB datastore configuration resources available","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"ensureDatastoreSecretAndCM"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"ConfigMap found","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"ensureDatastoreSecretAndCM","ConfigMap.Name":"im-datastore-edb-cm","ConfigMap.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Secret found","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"ensureDatastoreSecretAndCM","Secret.Name":"im-datastore-edb-secret","Secret.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Perform any pending migrations","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMigrations"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"No active or pending migrations; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMigrations"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Is SAAS enabled?","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Instance spec config value":false}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"Updating an existing Deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-auth-service"}
{"level":"info","ts":"2024-09-20T10:13:12Z","logger":"controller_authentication","msg":"SAAS tenant configmap was found","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Updating deployment with value from configmap":"cs-saas-tenant-config"}
{"level":"info","ts":"2024-09-20T10:13:14Z","logger":"controller_oidc_client","msg":"Zen registration already exists for oidc client - the zen instance will be updated","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"processZenRegistration","clientId":"oc5dxegt79tokut203wuou4etool2vk9","zenInstanceId":"6fac29b1-26f2-4e21-a386-d6908bca7a07"}
{"level":"info","ts":"2024-09-20T10:13:14Z","logger":"controller_authentication","msg":"CS??? get pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:14Z","logger":"controller_authentication","msg":"CS??? pod name=platform-auth-service-6db56c9fcc-5zkw8","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2024-09-20T10:13:14Z","logger":"controller_authentication","msg":"Skip reconcile: Deployment already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-auth-service"}
{"level":"info","ts":"2024-09-20T10:13:14Z","logger":"controller_authentication","msg":"Reconcile: Looking for deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":{"name":""}}
{"level":"info","ts":"2024-09-20T10:13:14Z","logger":"controller_authentication","msg":"Updating an existing Deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-management"}
{"level":"info","ts":"2024-09-20T10:13:14Z","logger":"controller_authentication","msg":"SAAS tenant configmap was found","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Updating deployment with value from configmap":"cs-saas-tenant-config"}
{"level":"info","ts":"2024-09-20T10:13:14Z","logger":"controller_authentication","msg":"CS??? get pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:14Z","logger":"controller_authentication","msg":"CS??? pod name=platform-identity-management-bfc9c98cd-mwhd2","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2024-09-20T10:13:14Z","logger":"controller_authentication","msg":"Skip reconcile: Manager deployment already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-management"}
{"level":"info","ts":"2024-09-20T10:13:14Z","logger":"controller_authentication","msg":"Reconcile: Looking for deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":{"name":""}}
{"level":"info","ts":"2024-09-20T10:13:14Z","logger":"controller_authentication","msg":"Updating an existing Deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-management"}
{"level":"info","ts":"2024-09-20T10:13:14Z","logger":"controller_authentication","msg":"SAAS tenant configmap was found","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Updating deployment with value from configmap":"cs-saas-tenant-config"}
{"level":"info","ts":"2024-09-20T10:13:14Z","logger":"controller_authentication","msg":"CS??? get pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:14Z","logger":"controller_authentication","msg":"CS??? pod name=platform-identity-provider-84b9577bbf-z6j98","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2024-09-20T10:13:14Z","logger":"controller_authentication","msg":"Final pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Pod names:":["platform-auth-service-6db56c9fcc-5zkw8","platform-identity-management-bfc9c98cd-mwhd2","platform-identity-provider-84b9577bbf-z6j98"]}
{"level":"info","ts":"2024-09-20T10:13:14Z","logger":"controller_authentication","msg":"Skip reconcile: Provider deployment already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-provider"}
{"level":"info","ts":"2024-09-20T10:13:14Z","logger":"controller_authentication","msg":"Update status before finishing loop.","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_authentication","msg":"Updated status","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_authentication","msg":"Reconciling Authentication","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_authentication","msg":"Add finalizers to MongoDB resources in case migration is needed","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"addFinalizers"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_authentication","msg":"No MongoDB migration required, so no need for finalizers; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"addFinalizers"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_authentication","msg":"Ensure that OperandRequest is updated with correct Operands","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleOperandRequest","OperandRequest.Name":"ibm-iam-request","OperandRequest.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_authentication","msg":"No changes to OperandRequest; continue","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleOperandRequest","OperandRequest.Name":"ibm-iam-request","OperandRequest.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_authentication","msg":"Clean up MongoDB resources if no longer being retained","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleRetainAnnotation"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_authentication","msg":"Annotation does not signal a need to clean up resources; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleRetainAnnotation"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_authentication","msg":"Create a CommonService CR for shared EDB claim","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_authentication","msg":"CommonService CR for shared EDB claim already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","CommonServiceName":"im-common-service"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted serviceaccount","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted role","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_oidc_client","msg":"Marking Client Ready condition as \"True\"","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"updateStatus"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_authentication","msg":"Failed to create ibm-iam-operand-restricted role or its already present","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted RoleBinding","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_oidc_client","msg":"Updating Client status","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"updateStatus"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_oidc_client","msg":"Reconciling Client CR complete","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_authentication","msg":"Failed to create ibm-iam-operand-restricted RoleBinding or its already present","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_authentication","msg":"Creating or updating new secret","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Certificate.Namespace":"ibm-common-services","Secret.Name":"ibmcloud-cluster-ca-cert"}
{"level":"info","ts":"2024-09-20T10:13:15Z","logger":"controller_authentication","msg":"Waiting for secret","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Certificate.Namespace":"ibm-common-services","Secret.Name":"platform-auth-secret"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Comparing calculated to observed secret","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Secret.Name":"ibmcloud-cluster-ca-cert"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"No significant changes found; skipping update.","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Secret.Name":"ibmcloud-cluster-ca-cert"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Query global cm","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Configmap.Namespace":"ibm-common-services","ConfigMap.Name":"ibm-cpp-config"}
{"level":"info","ts":"2024-09-20T10:13:16Z","msg":"Get cluster config"}
{"level":"info","ts":"2024-09-20T10:13:16Z","msg":"Got services namespace","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","msg":"Create client to query for ConfigMap"}
{"level":"info","ts":"2024-09-20T10:13:16Z","msg":"Try to find ConfigMap","name":"ibm-cpp-config","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","msg":"Found ConfigMap","name":"ibm-cpp-config","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","msg":"Looked for kubernetes_cluster_type","ok":false,"value":"","clusterType":"OpenShift"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"ibmcloud-cluster-info Configmap is already created by IM operator","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Configmap.Namespace":"ibm-common-services","ConfigMap.Name":"ibmcloud-cluster-info"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Current configmap","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Current Value":"true"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Calculated new platform-oidc-registration.json","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"No ConfigMap update required","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted clusterrole","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Failed to create ibm-iam-operand-restricted clusterrole or its already present","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Ensure that the ClusterRoleBinding is created","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleClusterRoleBinding"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"ClusterRoleBinding already exists, continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleClusterRoleBinding","ClusterRoleBinding.Name":"ibm-iam-operand-restricted-ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"ibm-iam-operand-restricted SA is updated with annotation successfully","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Zen front door disabled","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleZenExtension","ZenExtension.Name":"iam-zen-extension","ZenExtension.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"ConfigMap found","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","ConfigMap.Name":"ibmcloud-cluster-info","ConfigMap.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"No changes to ConfigMap data fields needed","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","ConfigMap.Name":"ibmcloud-cluster-info","ConfigMap.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Zen front door has not been enabled, so IM Routes will be created","func":"ReconcileRoutes","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"ConfigMap found","func":"ReconcileRoutes","namespace":"ibm-common-services","ConfigMap.Name":"ibmcloud-cluster-info","ConfigMap.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Determined platform-id-auth Route should not exist; removing if present","func":"ReconcileRoutes","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Reconciling route","name":"saml-ui-callback","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/ibm/saml20/defaultSP/acs","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-test-ibm-common-services.apps.daniyal.cp.fyre.ibm.com","routePath":"/ibm/saml20/defaultSP/acs"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Comparing current and desired routes","name":"saml-ui-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Routes are equal","name":"saml-ui-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Reconciling route","name":"social-login-callback","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/ibm/api/social-login","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-test-ibm-common-services.apps.daniyal.cp.fyre.ibm.com","routePath":"/ibm/api/social-login"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Comparing current and desired routes","name":"social-login-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Routes are equal","name":"social-login-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Reconciling route","name":"id-mgmt","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-test-ibm-common-services.apps.daniyal.cp.fyre.ibm.com","routePath":"/idmgmt/"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Comparing current and desired routes","name":"id-mgmt","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Routes are equal","name":"id-mgmt","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Reconciling route","name":"platform-auth","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/v1/auth/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-test-ibm-common-services.apps.daniyal.cp.fyre.ibm.com","routePath":"/v1/auth/"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Comparing current and desired routes","name":"platform-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Routes are equal","name":"platform-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Reconciling route","name":"platform-id-provider","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-test-ibm-common-services.apps.daniyal.cp.fyre.ibm.com","routePath":"/idprovider/"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Comparing current and desired routes","name":"platform-id-provider","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Routes are equal","name":"platform-id-provider","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Reconciling route","name":"platform-login","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/v1/auth/authorize?client_id=rq5py32hhtpkznngvqz07042pc5yj969&redirect_uri=https://cp-test-ibm-common-services.apps.daniyal.cp.fyre.ibm.com/auth/liberty/callback&response_type=code&scope=openid+email+profile&orig=/login","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-test-ibm-common-services.apps.daniyal.cp.fyre.ibm.com","routePath":"/login"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Comparing current and desired routes","name":"platform-login","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Routes are equal","name":"platform-login","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Reconciling route","name":"platform-oidc","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-test-ibm-common-services.apps.daniyal.cp.fyre.ibm.com","routePath":"/oidc"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Comparing current and desired routes","name":"platform-oidc","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Routes are equal","name":"platform-oidc","namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Ensure EDB datastore configuration resources available","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"ensureDatastoreSecretAndCM"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"ConfigMap found","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"ensureDatastoreSecretAndCM","ConfigMap.Name":"im-datastore-edb-cm","ConfigMap.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Secret found","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"ensureDatastoreSecretAndCM","Secret.Name":"im-datastore-edb-secret","Secret.Namespace":"ibm-common-services"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Perform any pending migrations","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMigrations"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"No active or pending migrations; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMigrations"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Is SAAS enabled?","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Instance spec config value":false}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"Updating an existing Deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-auth-service"}
{"level":"info","ts":"2024-09-20T10:13:16Z","logger":"controller_authentication","msg":"SAAS tenant configmap was found","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Updating deployment with value from configmap":"cs-saas-tenant-config"}
{"level":"info","ts":"2024-09-20T10:13:17Z","logger":"controller_authentication","msg":"CS??? get pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:17Z","logger":"controller_authentication","msg":"CS??? pod name=platform-auth-service-6db56c9fcc-5zkw8","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2024-09-20T10:13:17Z","logger":"controller_authentication","msg":"Skip reconcile: Deployment already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-auth-service"}
{"level":"info","ts":"2024-09-20T10:13:17Z","logger":"controller_authentication","msg":"Reconcile: Looking for deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":{"name":""}}
{"level":"info","ts":"2024-09-20T10:13:17Z","logger":"controller_authentication","msg":"Updating an existing Deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-management"}
{"level":"info","ts":"2024-09-20T10:13:17Z","logger":"controller_authentication","msg":"SAAS tenant configmap was found","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Updating deployment with value from configmap":"cs-saas-tenant-config"}
{"level":"info","ts":"2024-09-20T10:13:17Z","logger":"controller_authentication","msg":"CS??? get pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:17Z","logger":"controller_authentication","msg":"CS??? pod name=platform-identity-management-bfc9c98cd-mwhd2","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2024-09-20T10:13:17Z","logger":"controller_authentication","msg":"Skip reconcile: Manager deployment already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-management"}
{"level":"info","ts":"2024-09-20T10:13:17Z","logger":"controller_authentication","msg":"Reconcile: Looking for deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":{"name":""}}
{"level":"info","ts":"2024-09-20T10:13:17Z","logger":"controller_authentication","msg":"Updating an existing Deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-management"}
{"level":"info","ts":"2024-09-20T10:13:17Z","logger":"controller_authentication","msg":"SAAS tenant configmap was found","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Updating deployment with value from configmap":"cs-saas-tenant-config"}
{"level":"info","ts":"2024-09-20T10:13:18Z","logger":"controller_authentication","msg":"CS??? get pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:18Z","logger":"controller_authentication","msg":"CS??? pod name=platform-identity-provider-84b9577bbf-z6j98","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2024-09-20T10:13:18Z","logger":"controller_authentication","msg":"Final pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Pod names:":["platform-auth-service-6db56c9fcc-5zkw8","platform-identity-management-bfc9c98cd-mwhd2","platform-identity-provider-84b9577bbf-z6j98"]}
{"level":"info","ts":"2024-09-20T10:13:18Z","logger":"controller_authentication","msg":"Skip reconcile: Provider deployment already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-provider"}
{"level":"info","ts":"2024-09-20T10:13:18Z","logger":"controller_authentication","msg":"Update status before finishing loop.","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2024-09-20T10:13:18Z","logger":"controller_authentication","msg":"Updated status","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
^C

ibm-iam-operator-pod-logs.txt


AION

Hey i saw you have a good documentation about the L2 Login , can you check out the AION login its the same publisher and seems like the login is really similar to it :) would be nice to have a client for both games and you can support both games with some little changes :)
~greetings

okay S_INIT aka S_SESSION(real NCSOFT Name) = 388 : 194 bytes(both match)
C_AUTH_GG = 34 bytes (AION) : L2 = 34 bytes (but its worked , looks like server dont really care about this)
S_AUTH_GG = 42 bytes for both (AION:L2) cuz serverpacket for sure.
C_LOGIN = 186 bytes with AION Client : but just 178 bytes with your client after that i got an S_LOGIN_FAIL.
so seems like the first stuff worked without problems :)
if you interessted into supporting both games or want the real NCSOFT Packetnames(should match half half with L2) hit me up on Discord: NekoNeko#0440
~greetings


Refactored assembly to use in-memory model instead of IO model

The advantage of this code is streaming IO, with minimal reliance on disk speed. References to files and jar entries are stored as () => InputStream. Unzip to disk is gone, which is slow on some systems/hard drives.
Everything retained:

all functionalities (shade, merge, caching)
reproducible build (entires built in a specific order, jar entry timestamps identical for all entries, hash consistent)

The following were new:

No unzip
I cannot rename directories, that is the advantage of the unzip function of the current implementation (since files are unzipped, parent renames will reflect automatically to children - I cannot do this efficiently with this implementation). For this implementation I can only rename files. If there is a project file that conflicts, the project name is appended (i.e. LICENSE_foo), where in the current implementation the folder named LICENSE is renamed instead. For dependencies, the old behavior was maintained (i.e.LICENSE_scala-library-2.13.3). Tests were updated to reflect this change
Corrected the reporting of file merge counts
I additionally check for conflicts of files with directories that have the same name and signal an error, which the current implementation does not (it only checks for LICENSE conflicts. The current implementation will only throw this error when the jar is being created. New tests were added to reflect this change
The option to create the jar in parallel which is faster! (1.5 seconds vs 5 seconds) The catch is the reproducible build and caching won't work if the jar is built in parallel. The new property is AssemblyOption.reproducibleBuild
Dropped cacheUnzip property in AssemblyOptions
Dropped excludedFiles in AssemblyOptions (?) this is not documented and seems unused
Caching is now implemented by checking the last update timestamps of all included dependencies, plus some of the properties from AssemblyOptions, and if the output jar exists already
Documentation updates
Merge strategy retains the same structure, but the implementation (inputs and outputs) have changed, to support the classes added (Dependency, Project, Library, MergedEntry, JarEntry)
Newline appending Input Stream (called AppendEofInputStream) added in AssemblyUtils to support MergeStrategy.concat with newlines

@fnqista Thanks for this contribution. Looking forward to the perf improvements.
Since many Spark users use sbt-assembly and I am guessing that they use a lot of JARs, I wonder if we should do some before and after comparison to show case the difference in release notes etc.

In my home computer with an NVME GEN4 drive (7000 MB/sec read) and an AMD Ryzen 5900X the difference between the old and the new implementation is not too much. I will run it on my work computer though, where we can see much more dramatic improvements.

@fnqista Thanks for this contribution. Looking forward to the perf improvements. Since many Spark users use sbt-assembly and I am guessing that they use a lot of JARs, I wonder if we should do some before and after comparison to show case the difference in release notes etc.

When the computer is fast, like in my home computer which was upgraded recently, the difference between the old and new implementation is not that pronounced:
System: AMD Ryzen 5900X 12c/24t with NVME Gen4 drive (7000 MB/sec read)
Command: sbt clean assembly
Project: assembly jar ~90MB in size

Old implementation
[success] Total time: 22 s, completed Apr 16, 2022, 10:04:32 PM

New implementation (Ryzen 5900X with a Gen4 NVME drive):
[success] Total time: 20 s, completed Apr 16, 2022, 10:13:26 PM

However in my work computer, I have pre-tested before and something that takes 15 minutes in the old implementation only takes 29 seconds now. I will gather evidence when I am back at work after the Easter.

Here's a result from assembling a fresh Play app on my old mac laptop

sbt-assembly
assemble (median)
assemble (max out of 5)

Baseline (1.2.0)
10s
12s

This PR (default)
7s
9s

This PR (ThisBuild / assemblyRepeatableBuild := false)
5s
5s

@eed3si9n Release notes draft:
https://gist.github.com/fnqista/56fb6c5957302ba4af32c6c2b7dcb7c8

@eed3si9n The method signature of MergeStrategy.merge also has changed:
merge(conflicts: Vector[Dependency]): Either[String, Vector[JarEntry]] whereas the old one just uses standard primitive and collection types.
This is exposed to the user because they can create custom merge strategies. Shall we use contraband for these to at least guarantee some level of backward compatibility?

Major PR updates:

As agreed, I changed the implementation of MergeStrategy as per your suggestion:

val first: MergeStrategy = MergeStrategy("First") { conflicts =>
  Right(Vector(JarEntry(conflicts.head.target, conflicts.head.stream)))
}

For custom merge strategies (user-provided):

val first: MergeStrategy = CustomMergeStrategy("First") { conflicts =>
  Right(Vector(JarEntry(conflicts.head.target, conflicts.head.stream)))
}

I have to change the object for a custom merge strategy because:

Primarily to namespace them. It is easy for a user to create a custom merge strategy that is also named First, but properly namespacing them makes us distinguish each other when needed in both the code and in the logs.
To prevent future plugin contributors who will create/modify a built-in MergeStrategy in as a "custom" one, again breaking namespacing.
You can browse the code under sbtassembly.MergeStrategy. I used a sealed trait that extends a Function1 plus two descendants to represent the namespacing. Companion objects are also created for them.

And another one - if the user includes .class files in a built-in rename strategy, I throw an error now (well, really, return a Left), and inform them that they should use shadeRules instead. In 1.2.0 this was ignored but also silently a no-op, without informing the user. I think it is important to be transparent with the plugin behavior regarding this. Code is in MergeStrategy, plus a new test is added for this.

I updated the README to clarify that a MergeStrategy doesn't only merge, it also transforms, such as in the case of a rename, where it probably matches only a single file. I think it is important that this is communicated to the users.

I exposed JarEntry and CustomMergeStrategy as an auto import in AssemblyPlugin, since I have tried this myself and found out that this increases the user's convenience.

I also created an implicit class conversion from String -> java.nio.file.Path since Path is used by JarEntry, again in AssemblyPlugin.

I implemented the other review comment about test in assembly := {},, which now properly returns Unit, again in AssemblyPlugin.

I type-aliased () => InputStream as LazyInputStream in Assembly

I finally moved the rename logic inside the cache block too. Now, to check the cache, nothing is every really done except to build the Dependency to check if their timestamps have changed. Before, we always process the renames before checking the cache. I don't know what I was thinking before, but it seems that we don't always need to process renames before checking the cache (I hope I am right). Anyway, I tested it quite a few times and it seems solid. Code is in Assembly.

I created the MergeStrategy.isBuiltIn property to namespace custom ones from, well, built-in ones - and make sure it is included in the cache checking. Also in Assembly.

Minor code and test updates due to the above changes.

@eed3si9n
So, me and a few colleagues tested this at work over the past week and we found some bugs, all of them related to custom merge strategies.

The Custom rename strategy method signature must be changed so it can only return a String representing the renamed target, instead of Vector[JarEntry], to prevent users from corrupting the result, when they should only be renaming the target. So the correct signature should be CustomStrategy.rename(f: Dependency => String) instead of the old CustomStrategy.rename(f: Vector[Dependency] => Vector[Either[String, JarEntry]])

Renames should really be done before evaluating the cache, which I broke in my previous commit. Otherwise, if we do it after checking the cache, the assembly might not execute when it should, in cases where the rename might cause another conflict.

Custom merge strategies, other than rename, breaks the caching. In this PR, the only way to check if the merge strategies have changed is by creating a Map[String, String] representing the matched target and the merge strategy name. This is mostly ok for built-in strategies and the custom rename because their code/logic doesn't change. But with custom merge strategies, the name means nothing when caching since we cannot predict what the user will do, thereby it breaks caching again by the code thinking that nothing has changed when in fact the user updated the merge strategy logic and assembly should re-run.

I have prepared some fixes but I am still testing them, hopefully I can make a new push within a couple of days.

@eed3si9n So, me and a few colleagues tested this at work over the past week and we found some bugs, all of them related to custom merge strategies.

The Custom rename strategy method signature must be changed so it can only return a String representing the renamed target, instead of Vector[JarEntry], to prevent users from corrupting the result, when they should only be renaming the target. So the correct signature should be CustomStrategy.rename(f: Dependency => String) instead of the old CustomStrategy.rename(f: Vector[Dependency] => Vector[Either[String, JarEntry]])
Renames should really be done before evaluating the cache, which I broke in my previous commit. Otherwise, if we do it after checking the cache, the assembly might not execute when it should, in cases where the rename might cause another conflict.
Custom merge strategies, other than rename, breaks the caching. In this PR, the only way to check if the merge strategies have changed is by creating a Map[String, String] representing the matched target and the merge strategy name. This is mostly ok for built-in strategies and the custom rename because their code/logic doesn't change. But with custom merge strategies, the name means nothing when caching since we cannot predict what the user will do, thereby it breaks caching again by the code thinking that nothing has changed when in fact the user updated the merge strategy logic and assembly should re-run.

I have prepared some fixes but I am still testing them, hopefully I can make a new push within a couple of days.
EDIT: Clarifying point no. 3 about custom renames being OK - If we fix no. 2 (rename before caching), then custom renames will happen before the cache.

Fixes committed for the above...hopefully the last one.

@eed3si9n Can you review the pending changes and then create an RC1 candidate when you have time?


workflow integration and dependency management

Hi,
I am wondering how can we use workflow tools like yeoman and grunt for build and deployment automation within socketstream framework ?
Also, seems to be a good idea that we should use requirejs to replace how we resolve client script dependency client/code/libs.
I think it will drastically help the adoption of socketstream once we have the above features.

Closing this to make a better issue #525 entry for 0.5


Disable time picker option

It would be good to have a option to disable the time picker just like "disableMonthYearSelect" option.

My bad. There is an option for that: https://vue3datepicker.com/api/props/#enabletimepicker

Included in the v2.5.0


Support for alternative extensions

I often utilize rmarkdown formatted documents. Would it be possible to include these as links in the graph view, perhaps through a settings parameter?
The following setting gets markdown preview to work along with backlinks in vscode-markdown-notes, but doesn't seem to work for the graph view in the markdown-links extension:
  "files.associations": {
    "*.rmd": "markdown"
  },

It was hardcoded in the code but it absolutely makes sense to support it properly. Adding to the TODO list.
Thanks for reporting it!

+1 On this: I'd love support for .mdx files myself.


Fix: Deployment Principal ARNs

what

Add test for deployment_principal_arns
Fix order of nested functions when rendering bucket policy for deployment_principal_arns — otherwise an error occurs when comparing types.
Fix snippet: all prefixes must begin in forward slash or otherwise the bucket policy JSON will be invalid.
Fix snippet passing incorrect variable name.

(misc)

Fix typo in tfvars fixtures in example.
Add enablement toggles to all resources in example
Fix minimum_protocol_version being passed when it won't be honored by AWS i.e. when s3_access_log_bucket_name is true as a result of acm_certificate_arn being unset.
Fix default for s3_access_log_bucket_name — it is supposed to be empty and there is a check for its length in locals{} that assumes it is empty by default, but it is not empty by default.

why

deployment_principal_arns was not working and examples/complete was not testing for it

references

#160

/test all

/test all

Tests are currently stuck in queued due to a GitHub Actions incident

/test all

Will need to remove validation due to Terraform version used in tests being too old for functions used in validation block.

/test all

/test all

/test all

/test all

/test all

@Nuru thank you — yes it does seem better to programatically handle the leading slash and not have the user deal with it. I just fixed a couple of typos in deployment.tf

/test all


CLI/Tooling side validation for Avro and OpenAPI schema

Feature or problem description
We should be able to validate schema file before sending it to server.
We should look to see if we can use the same validation as backend (for consistency)

CC @paoloantinori to add some extra requirements.

Why would we do this?  The server can perform content validation (when enabled).

@paoloantinori mention this as something that we could do.

This was a use case extracted by the interaction with Tim's team.
The end-to-end client-server communication was failing.
The problem triggering the failure was a validation issue.
Validation, per se, is a problem that could be solved on the client-side.
And it would make sense in a development workflow binding these checks in a Maven or npm step.
I was suggesting duplicating the server validation logic in the CLI, to allow this.
With the additional functional requirement of guaranteeing that the same exact validation logic is run on both the CLI or on the server, and not assume that the simple adherence to a format could be enough to avoid eventual bugs caused by different implementations.

I think perhaps the solution here is to have the CLI support our existing server-side "Test" operation.  We have a REST API operation that allows a user to test whether a new version of an artifact would pass the configured rules or not, without actually doing an update.
We could introduce an additional REST API operation that could do the same thing when creating an artifact (we currently only support the Test operation for updating an artifact with a new version).

Sounds like this could be moved to apicurio registry issues?

I still do believe that it could be interesting to have the functionality replicated on the client side, but Eric's suggested approach seems a reasonable compromise that should be addressed on the Apicurio Issues side, but you probably want to keep a corresponding task here to consume the future functionality.

Validating user input as early as possible is generally a good idea so that the user does not have to go through multiple steps, only to see that the input was invalid after a response from the server. So if we use this "Test" operation in the CLI it should happen early in the command steps.

operation that allows a user to test whether a new version of an artifact would pass the configured rules or not

So this validates whether the artifact would pass the configured rules, which I think is fine to do at the point where you create/update the artifact. What I think this issue is asking for is more so a generic Avro/JSON schema validation - i.e. check if these are what they are supposed to be before sending them to the server.
Something like https://github.com/xeipuuv/gojsonschema#example just simply validates the JSON schema without needing an API call.

I'm not against client-side validation of content, so if that's what we want to do then OK.  I guess my concern is that the validation done on the server is not static, but configurable (in minor ways now, but likely in much more advanced ways in the future).  For example right now you can disable validation entirely, and the server will allow you to upload whatever you want and call it an Avro artifact.  Or you can enable syntax-only validation, which will cause the server to ensure that the content is at least syntactically valid (e.g. the content is a JSON file).  or you can enable semantic validation, which goes further to ensure that it's not just a JSON file, but it's actually semantically valid for the type you claim it is (e.g. Avro or OpenAPI).
In the future we will likely also have customizable validation (i.e. linting) where the validation can be configured at a fine-grained level.
If the CLI just does basic syntax validation on the content (based on the artifact type indicated by the user) then that seems like a fine thing to do.  But know that the CLI could pass validation and the server could still fail.  And also the CLI could fail validation where the server would not have.
Also note that the CLI can only validate the content if it knows what the content actually is.  So it can probably only enable validation if the user provides the artifact type.  The server is smarter because it introspects the content if no artifactType is provided by the client.

Thank you so much for context. I think safest way would be to close this for now, but feel free to reopen in case we can add some validation checks in future

Well, I think it's been a good discussion but I'm not sure it was finished/closed.  :)

We actually have jira requirement for that feature as part of the advanced use cases. We going to close that issue as we are moving to jira issues.


[CLI] Get error when using wandb with multiprocessing package

Description
With wandb, when I am using multiprocessing.Pool related function, it reports that it cannot find a corresponding function in my program.
Wandb features
wandb.init(), wandb.agent()
How to reproduce
Unfortunately, I cannot share the scripts, but I will describe the program's structure for you and let me know if you need more information.
import wandb
from multiprocessing import Pool

def process_one_episode(**kwargs):
    ...

def train(**kwargs):
    ...

def eval(**kwargs):
    pool = Pool(num_processes)
    result_list = []
    for i in range(n_examples):
        result_list.append(
        pool.apply_async(
             process_one_episode, (
                    **kwargs
                )
            )
       )

def main(**kwargs):
    wandb.init()
    train(**kwargs)
    eval(**kwargs)

if __name__ == '__init__':
    wandb.agent(sweep_id, function=lambda: main(**kwargs), count=1)

The error message is:
Process SpawnPoolWorker-1:
Traceback (most recent call last):
  File "***/lib/python3.7/multiprocessing/process.py", line 297, in _bootstrap
    self.run()
  File "***/lib/python3.7/multiprocessing/process.py", line 99, in run
    self._target(*self._args, **self._kwargs)
  File "***/lib/python3.7/multiprocessing/pool.py", line 110, in worker
    task = get()
  File "***/lib/python3.7/multiprocessing/queues.py", line 354, in get
    return _ForkingPickler.loads(res)
AttributeError: Can't get attribute 'process_one_episode' on <module 'wandb.mpmain.__main__' from '***/lib/python3.7/site-packages/wandb/mpmain/__main__.py'>

Environment

OS:  Red Hat Enterprise Linux 8.2 (Ootpa)
Environment: anaconda
Python Version: 3.7.9

Hi there, this should be fixed in the next client release


chore: Update @ts-bridge/cli to 0.6.1

Explanation
Update @ts-bridge/cli from 0.5.1 to 0.6.1. This version can build project references in parallel, significantly improving build speed.
References
None
Checklist

[ ] I've updated the test suite for new or updated code as appropriate
[ ] I've updated documentation (JSDoc, Markdown, etc.) for new or updated code as appropriate
[ ] I've highlighted breaking changes using the "BREAKING" category above as appropriate
[ ] I've prepared draft pull requests for clients and consumer packages to resolve any breaking changes

@metamaskbot publish-previews