Skip to content

Updated golang.org/x/oauth2 version to 0.27.0 [SC2] #1063

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: release-sc2
Choose a base branch
from
Open

Updated golang.org/x/oauth2 version to 0.27.0 [SC2] #1063

wants to merge 1 commit into from

Conversation

Raniprathyusha
Copy link
Collaborator

@ibm-ci-bot
Copy link

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: Raniprathyusha
Once this PR has been reviewed and has the lgtm label, please assign tirumalavasa for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@YangShyrMei
Copy link
Collaborator

YangShyrMei commented Jul 4, 2025 •
edited
Loading

I replaced the built amd64 image in a fyre cluster. The pod came up in running state after successfully pulling the image.

~ % oc get pods | grep iam-operator                                                              
ibm-iam-operator-8884c688f-bxrfn                                 1/1     Running     0          16s

The pod description verifies that the image with the golang update is deployed.

~ % oc describe pod ibm-iam-operator-8884c688f-bxrfn
Name:             ibm-iam-operator-8884c688f-bxrfn
Namespace:        ibm-common-services
Priority:         0
Service Account:  ibm-iam-operator
Node:             worker1.o1-909733.cp.fyre.ibm.com/10.14.103.99
Start Time:       Fri, 04 Jul 2025 13:49:05 +0530
Labels:           app.kubernetes.io/instance=ibm-iam-operator
                  app.kubernetes.io/managed-by=ibm-iam-operator
                  app.kubernetes.io/name=ibm-iam-operator
                  intent=projected
                  name=ibm-iam-operator
                  pod-template-hash=8884c688f
                  productName=IBM_Cloud_Platform_Common_Services
Annotations:      alm-examples:
                    [
                      {
                        "apiVersion": "operator.ibm.com/v1alpha1",
                        "kind": "Authentication",
                        "metadata": {
                          "labels": {
                            "app.kubernetes.io/instance": "ibm-iam-operator",
                            "app.kubernetes.io/managed-by": "ibm-iam-operator",
                            "app.kubernetes.io/name": "ibm-iam-operator"
                          },
                          "name": "example-authentication"
                        },
                        "spec": {
                          "auditService": {
                            "imageName": "auditService no longer used - ignore",
                            "imageRegistry": "auditService no longer used - ignore",
                            "imageTag": "auditService no longer used - ignore"
                          },
                          "authService": {
                            "imageName": "icp-platform-auth",
                            "imageRegistry": "icr.io/cpopen/cpfs",
                            "imageTag": "4.5.14",
                            "ldapsCACert": "platform-auth-ldaps-ca-cert",
                            "resources": {
                              "limits": {
                                "cpu": "1000m",
                                "ephemeral-storage": "650Mi",
                                "memory": "1Gi"
                              },
                              "requests": {
                                "cpu": "100m",
                                "ephemeral-storage": "400Mi",
                                "memory": "350Mi"
                              }
                            },
                            "routerCertSecret": "saml-auth-secret"
                          },
                          "clientRegistration": {
                            "imageName": "im-initcontainer",
                            "imageRegistry": "icr.io/cpopen/cpfs",
                            "imageTag": "4.5.14",
                            "resources": {
                              "limits": {
                                "cpu": "1000m",
                                "memory": "1Gi"
                              },
                              "requests": {
                                "cpu": "100m",
                                "ephemeral-storage": "158Mi",
                                "memory": "128Mi"
                              }
                            }
                          },
                          "config": {
                            "authUniqueHosts": "internal-ip1 internal-ip2 mycluster.icp",
                            "bootstrapUserId": "kubeadmin",
                            "claimsMap": "name=\"givenName\" family_name=\"givenName\" given_name=\"givenName\" preferred_username=\"displayName\" display_nam...
                            "claimsSupported": "name,family_name,display_name,given_name,preferred_username",
                            "clusterCADomain": "mycluster.icp",
                            "clusterExternalAddress": "10.0.0.1",
                            "clusterInternalAddress": "10.0.0.1",
                            "clusterName": "mycluster",
                            "defaultAdminPassword": "password",
                            "defaultAdminUser": "cpadmin",
                            "enableImpersonation": false,
                            "fipsEnabled": true,
                            "ibmCloudSaas": false,
                            "icpPort": 8443,
                            "installType": "fresh",
                            "isOpenshiftEnv": true,
                            "nonceEnabled": true,
                            "oidcIssuerURL": "https://127.0.0.1:443/idauth/oidc/endpoint/OP",
                            "openshiftPort": 443,
                            "preferredLogin": "",
                            "providerIssuerURL": "",
                            "roksEnabled": true,
                            "roksURL": "https://roks.domain.name:443",
                            "roksUserPrefix": "changeme",
                            "saasClientRedirectUrl": "",
                            "scimAdminPassword": "scimpassword",
                            "scimAdminUser": "scimadmin",
                            "scopeClaim": "profile=\"name,family_name,display_name,given_name,preferred_username\"",
                            "wlpClientID": "4444be3a738841016ab76d71b650e836",
                            "wlpClientRegistrationSecret": "f1362ca4d20b8389af2d1ea68042c9af",
                            "wlpClientSecret": "aa73bf39752053bf723d1143fb4cf8a2",
                            "xframeDomain": ""
                          },
                          "identityManager": {
                            "imageName": "icp-identity-manager",
                            "imageRegistry": "icr.io/cpopen/cpfs",
                            "imageTag": "4.5.14",
                            "masterNodesList": "10.0.0.1",
                            "resources": {
                              "limits": {
                                "cpu": "1000m",
                                "ephemeral-storage": "550Mi",
                                "memory": "1Gi"
                              },
                              "requests": {
                                "cpu": "50m",
                                "ephemeral-storage": "300Mi",
                                "memory": "150Mi"
                              }
                            }
                          },
                          "identityProvider": {
                            "imageName": "icp-identity-provider",
                            "imageRegistry": "icr.io/cpopen/cpfs",
                            "imageTag": "4.5.14",
                            "resources": {
                              "limits": {
                                "cpu": "1000m",
                                "ephemeral-storage": "550Mi",
                                "memory": "1Gi"
                              },
                              "requests": {
                                "cpu": "50m",
                                "ephemeral-storage": "300Mi",
                                "memory": "150Mi"
                              }
                            }
                          },
                          "initMongodb": {
                            "imageName": "im-initcontainer",
                            "imageRegistry": "icr.io/cpopen/cpfs",
                            "imageTag": "4.5.14",
                            "resources": {
                              "limits": {
                                "cpu": "100m",
                                "memory": "128Mi"
                              },
                              "requests": {
                                "cpu": "100m",
                                "ephemeral-storage": "178Mi",
                                "memory": "128Mi"
                              }
                            }
                          },
                          "operatorVersion": "0.14.1",
                          "replicas": 1
                        }
                      },
                      {
                        "apiVersion": "operator.ibm.com/v1alpha1",
                        "kind": "OperandBindInfo",
                        "metadata": {
                          "name": "ibm-iam-bindinfo"
                        },
                        "spec": {
                          "operand": "ibm-im-operator",
                          "registry": "common-service",
                          "description": "Binding information that should be accessible to iam adopters",
                          "bindings": {
                            "public-oidc-creds": {
                              "secret": "platform-oidc-credentials"
                            },
                            "public-auth-creds": {
                              "secret": "platform-auth-idp-credentials"
                            },
                            "public-scim-creds": {
                              "secret": "platform-auth-scim-credentials"
                            },
                            "public-auth-cert": {
                              "secret": "platform-auth-secret"
                            },
                            "public-cam-secret": {
                              "secret": "oauth-client-secret"
                            },
                            "public-cam-map": {
                              "configmap": "oauth-client-map"
                            },
                            "public-auth-config": {
                              "configmap": "platform-auth-idp"
                            },
                            "public-ibmcloud-config": {
                              "configmap": "ibmcloud-cluster-info"
                            },
                            "public-ibmcloudca-secret": {
                              "secret": "ibmcloud-cluster-ca-cert"
                            }
                          }
                        }
                      }
                    ]
                  capabilities: Basic Install
                  categories: Security
                  certified: false
                  containerImage: quay.io/shyr_mei_yang1/ibm-iam-operator:040725
                  createdAt: 2024-11-11T18:03:12Z
                  description:
                    The IAM operator provides a simple Kubernetes CRD-Based API to manage the lifecycle of IAM services. With this operator, you can simply de...
                  k8s.ovn.org/pod-networks:
                    {"default":{"ip_addresses":["10.254.20.59/22"],"mac_address":"0a:58:0a:fe:14:3b","gateway_ips":["10.254.20.1"],"routes":[{"dest":"10.254.0...
                  k8s.v1.cni.cncf.io/network-status:
                    [{
                        "name": "ovn-kubernetes",
                        "interface": "eth0",
                        "ips": [
                            "10.254.20.59"
                        ],
                        "mac": "0a:58:0a:fe:14:3b",
                        "default": true,
                        "dns": {}
                    }]
                  olm.operatorGroup: common-service
                  olm.operatorNamespace: ibm-common-services
                  olm.skipRange: <4.5.14
                  olm.targetNamespaces: ibm-common-services
                  openshift.io/scc: restricted-v2
                  operatorframework.io/properties:
                    {"properties":[{"type":"olm.gvk","value":{"group":"oidc.security.ibm.com","kind":"Client","version":"v1"}},{"type":"olm.gvk","value":{"gro...
                  operators.operatorframework.io/builder: operator-sdk-v1.37.0
                  operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
                  productID: 068a62892a1e4db39641342e592daa25
                  productMetric: FREE
                  productName: IBM Cloud Platform Common Services
                  repository: https://github.com/IBM/ibm-iam-operator
                  seccomp.security.alpha.kubernetes.io/pod: runtime/default
                  support: IBM
Status:           Running
SeccompProfile:   RuntimeDefault
IP:               10.254.20.59
IPs:
  IP:           10.254.20.59
Controlled By:  ReplicaSet/ibm-iam-operator-8884c688f
Containers:
  ibm-iam-operator:
    Container ID:    cri-o://3f3af8afc4e920644e0743ea70aaa77f1b5dd540fd37ac0a83509bed19c90209
    Image:           quay.io/shyr_mei_yang1/ibm-iam-operator:040725
    Image ID:        quay.io/shyr_mei_yang1/ibm-iam-operator@sha256:701253e74ba8fa04ed8d3948bd2231fd1d9d426a8a548d9efa64fcf79cc46eb8
    Port:            <none>
    Host Port:       <none>
    SeccompProfile:  RuntimeDefault
    Command:
      ibm-iam-operator
    State:          Running
      Started:      Fri, 04 Jul 2025 13:49:07 +0530
    Ready:          True
    Restart Count:  0
    Limits:
      cpu:     25m
      memory:  320Mi
    Requests:
      cpu:                20m
      ephemeral-storage:  256Mi
      memory:             80Mi
    Environment:
      WATCH_NAMESPACE:              <set to the key 'namespaces' of config map 'namespace-scope'>  Optional: false
      POD_NAME:                     ibm-iam-operator-8884c688f-bxrfn (v1:metadata.name)
      POD_NAMESPACE:                ibm-common-services (v1:metadata.namespace)
      OPERATOR_NAME:                ibm-iam-operator
      ROUTE_HTTP_PORT:              
      ROUTE_HTTPS_PORT:             
      cluster_name:                 
      ICP_PLATFORM_AUTH_IMAGE:      icr.io/cpopen/cpfs/icp-platform-auth@sha256:8efa5c769f3f7520d85968342140ac16d03a34d8911ec4f156af00f54a5eeb34
      ICP_IDENTITY_PROVIDER_IMAGE:  icr.io/cpopen/cpfs/icp-identity-provider@sha256:98b7618bbce0761c0a126d1c6d4b46835bad27c3a1e14de8347b2c3f4cfd7d5e
      ICP_IDENTITY_MANAGER_IMAGE:   docker-na-public.artifactory.swg-devops.com/hyc-cloud-private-scratch-docker-local/ibmcom/icp-identity-manager-amd64:0b03474
      IM_INITCONTAINER_IMAGE:       icr.io/cpopen/cpfs/im-initcontainer@sha256:952f7da2b17a0feadb7382a8eca8be0a1c9328b40427f0a358db2f7604682368
      OPERATOR_CONDITION_NAME:      ibm-iam-operator.v4.5.14
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-gfdzx (ro)
Conditions:
  Type                        Status
  PodReadyToStartContainers   True 
  Initialized                 True 
  Ready                       True 
  ContainersReady             True 
  PodScheduled                True 
Volumes:
  kube-api-access-gfdzx:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
    ConfigMapName:           openshift-service-ca.crt
    ConfigMapOptional:       <nil>
QoS Class:                   Burstable
Node-Selectors:              <none>
Tolerations:                 node.kubernetes.io/memory-pressure:NoSchedule op=Exists
                             node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type    Reason          Age   From               Message
  ----    ------          ----  ----               -------
  Normal  Scheduled       55s   default-scheduler  Successfully assigned ibm-common-services/ibm-iam-operator-8884c688f-bxrfn to worker1.o1-909733.cp.fyre.ibm.com
  Normal  AddedInterface  54s   multus             Add eth0 [10.254.20.59/22] from ovn-kubernetes
  Normal  Pulled          54s   kubelet            Container image "quay.io/shyr_mei_yang1/ibm-iam-operator:040725" already present on machine
  Normal  Created         53s   kubelet            Created container: ibm-iam-operator
  Normal  Started         53s   kubelet            Started container ibm-iam-operator

@YangShyrMei
Copy link
Collaborator

YangShyrMei commented Jul 4, 2025 •
edited
Loading

The iam-operator container doesn't log any suspicious events and is as expected.

~ % oc logs -f ibm-iam-operator-8884c688f-bxrfn -c ibm-iam-operator                
{"level":"info","ts":"2025-07-04T08:19:13Z","logger":"setup","msg":"starting manager"}
{"level":"info","ts":"2025-07-04T08:19:13Z","logger":"controller-runtime.metrics","msg":"Starting metrics server"}
{"level":"info","ts":"2025-07-04T08:19:13Z","msg":"starting server","kind":"health probe","addr":"[::]:8081"}
{"level":"info","ts":"2025-07-04T08:19:13Z","msg":"Starting EventSource","controller":"client","controllerGroup":"oidc.security.ibm.com","controllerKind":"Client","source":"kind source: *v1.Client"}
{"level":"info","ts":"2025-07-04T08:19:13Z","msg":"Starting EventSource","controller":"client","controllerGroup":"oidc.security.ibm.com","controllerKind":"Client","source":"kind source: *v1.Secret"}
{"level":"info","ts":"2025-07-04T08:19:13Z","msg":"Starting Controller","controller":"client","controllerGroup":"oidc.security.ibm.com","controllerKind":"Client"}
{"level":"info","ts":"2025-07-04T08:19:13Z","msg":"Starting EventSource","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","source":"kind source: *v1alpha1.Authentication"}
{"level":"info","ts":"2025-07-04T08:19:13Z","msg":"Starting EventSource","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","source":"kind source: *v1.ConfigMap"}
{"level":"info","ts":"2025-07-04T08:19:13Z","msg":"Starting EventSource","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","source":"kind source: *v1.Secret"}
{"level":"info","ts":"2025-07-04T08:19:13Z","msg":"Starting EventSource","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","source":"kind source: *v1.Certificate"}
{"level":"info","ts":"2025-07-04T08:19:13Z","msg":"Starting EventSource","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","source":"kind source: *v1.Job"}
{"level":"info","ts":"2025-07-04T08:19:13Z","msg":"Starting EventSource","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","source":"kind source: *v1.Service"}
{"level":"info","ts":"2025-07-04T08:19:13Z","msg":"Starting EventSource","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","source":"kind source: *v1.Ingress"}
{"level":"info","ts":"2025-07-04T08:19:13Z","msg":"Starting EventSource","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","source":"kind source: *v1.Deployment"}
{"level":"info","ts":"2025-07-04T08:19:13Z","msg":"Starting EventSource","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","source":"kind source: *v1.Route"}
{"level":"info","ts":"2025-07-04T08:19:13Z","msg":"Starting EventSource","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","source":"kind source: *v1alpha1.OperandRequest"}
{"level":"info","ts":"2025-07-04T08:19:13Z","msg":"Starting Controller","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication"}
{"level":"info","ts":"2025-07-04T08:19:13Z","logger":"controller-runtime.metrics","msg":"Serving metrics server","bindAddress":":8080","secure":false}
I0704 08:19:16.286249       1 trace.go:236] Trace[331951939]: "DeltaFIFO Pop Process" ID:ibm-common-services/zen-admin-sa-dockercfg-zcwr9,Depth:12,Reason:slow event handlers blocking the queue (04-Jul-2025 08:19:16.086) (total time: 199ms):
Trace[331951939]: [199.300019ms] [199.300019ms] END
{"level":"info","ts":"2025-07-04T08:19:19Z","msg":"Starting workers","controller":"client","controllerGroup":"oidc.security.ibm.com","controllerKind":"Client","worker count":1}
{"level":"info","ts":"2025-07-04T08:19:19Z","logger":"controller_oidc_client","msg":"Reconciling Client CR","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:19Z","logger":"controller_oidc_client","msg":"Confirm that Authentication CR for IM is ready before reconciling Client","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"confirmAuthenticationIsReady"}
{"level":"info","ts":"2025-07-04T08:19:21Z","logger":"controller_oidc_client","msg":"Authentication CR is ready; proceding with Client reconciliation","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"confirmAuthenticationIsReady"}
{"level":"info","ts":"2025-07-04T08:19:21Z","logger":"controller_oidc_client","msg":"Add finalizer to Client if not already present","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"addFinalizer"}
{"level":"info","ts":"2025-07-04T08:19:21Z","logger":"controller_oidc_client","msg":"All Client finalizers were already set; skipping","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"addFinalizer"}
{"level":"info","ts":"2025-07-04T08:19:21Z","logger":"controller_oidc_client","msg":"Handle cleanup of Client if it has been marked for deletion","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"handleDeletion"}
{"level":"info","ts":"2025-07-04T08:19:21Z","logger":"controller_oidc_client","msg":"Client is not being deleted; skipping","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"handleDeletion"}
{"level":"info","ts":"2025-07-04T08:19:21Z","logger":"controller_oidc_client","msg":"Ensuring Secret and Client ID are set","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"ensureSecretAndClientIdSet"}
{"level":"info","ts":"2025-07-04T08:19:21Z","logger":"controller_oidc_client","msg":"Processing OIDC client registration","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"processOidcRegistration"}
{"level":"info","ts":"2025-07-04T08:19:21Z","logger":"controller_oidc_client","msg":"Deployment is available","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"processOidcRegistration","Deployment.Name":"platform-identity-provider","Deployment.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:21Z","msg":"Starting workers","controller":"authentication","controllerGroup":"operator.ibm.com","controllerKind":"Authentication","worker count":1}
{"level":"info","ts":"2025-07-04T08:19:21Z","logger":"controller_authentication","msg":"Reconciling Authentication","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:22Z","logger":"controller_authentication","msg":"Add finalizers to MongoDB resources in case migration is needed","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"addFinalizers"}
{"level":"info","ts":"2025-07-04T08:19:22Z","logger":"controller_authentication","msg":"No MongoDB migration required, so no need for finalizers; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"addFinalizers"}
{"level":"info","ts":"2025-07-04T08:19:22Z","logger":"controller_authentication","msg":"Does not need MongoDB migration; skipping","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"overrideMongoDBBootstrap"}
{"level":"info","ts":"2025-07-04T08:19:22Z","logger":"controller_authentication","msg":"Ensure that OperandRequest is updated with correct Operands","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleOperandRequest","OperandRequest.Name":"ibm-iam-request","OperandRequest.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:22Z","logger":"controller_authentication","msg":"No changes to OperandRequest; continue","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleOperandRequest","OperandRequest.Name":"ibm-iam-request","OperandRequest.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:22Z","logger":"controller_authentication","msg":"Create a CommonService CR for shared EDB claim","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:22Z","logger":"controller_authentication","msg":"CommonService CR for shared EDB claim already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","CommonServiceName":"im-common-service"}
{"level":"info","ts":"2025-07-04T08:19:22Z","logger":"controller_authentication","msg":"Ensure EDB datastore configuration resources available","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"ensureDatastoreSecretAndCM"}
{"level":"info","ts":"2025-07-04T08:19:22Z","logger":"controller_authentication","msg":"ConfigMap found","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"ensureDatastoreSecretAndCM","ConfigMap.Name":"im-datastore-edb-cm","ConfigMap.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:22Z","logger":"controller_authentication","msg":"Secret found","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"ensureDatastoreSecretAndCM","Secret.Name":"im-datastore-edb-secret","Secret.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:22Z","logger":"controller_authentication","msg":"Perform any pending migrations","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMigrations"}
{"level":"info","ts":"2025-07-04T08:19:22Z","logger":"controller_authentication","msg":"Retrieving change logs","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:22Z","logger":"controller_authentication","msg":"Connecting to PostgresDB","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","PostgresDB.Host":"common-service-db-rw.ibm-common-services.svc","PostgresDB.Port":"5432"}
{"level":"info","ts":"2025-07-04T08:19:23Z","logger":"controller_authentication","msg":"No active or pending migrations; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMigrations"}
{"level":"info","ts":"2025-07-04T08:19:23Z","logger":"controller_authentication","msg":"Set the migration success condition if it is not already set","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"setMigrationCompleteStatus"}
{"level":"info","ts":"2025-07-04T08:19:23Z","logger":"controller_authentication","msg":"MigrationsPerformed condition has already been set; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"setMigrationCompleteStatus"}
{"level":"info","ts":"2025-07-04T08:19:23Z","logger":"controller_authentication","msg":"Clean up MongoDB resources if no longer needed","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMongoDBCleanup"}
{"level":"info","ts":"2025-07-04T08:19:23Z","logger":"controller_authentication","msg":"Condition indicates migrations have completed","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMongoDBCleanup"}
{"level":"info","ts":"2025-07-04T08:19:23Z","logger":"controller_authentication","msg":"No cleanup was necessary; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMongoDBCleanup"}
{"level":"info","ts":"2025-07-04T08:19:23Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted serviceaccount","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:24Z","logger":"controller_oidc_client","msg":"Client found, update Client","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"processOidcRegistration"}
{"level":"info","ts":"2025-07-04T08:19:24Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted role","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:24Z","logger":"controller_authentication","msg":"Failed to create ibm-iam-operand-restricted role or its already present","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:24Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted RoleBinding","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:24Z","logger":"controller_oidc_client","msg":"Client registration update successful","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:24Z","logger":"controller_oidc_client","msg":"Updating Client CR spec","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"processOidcRegistration"}
{"level":"info","ts":"2025-07-04T08:19:24Z","logger":"controller_authentication","msg":"Failed to create ibm-iam-operand-restricted RoleBinding or its already present","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:24Z","logger":"controller_oidc_client","msg":"Add any missing Client annotations to ibm-iam-operand-restricted ServiceAccount","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"annotateServiceAccount"}
{"level":"info","ts":"2025-07-04T08:19:24Z","logger":"controller_oidc_client","msg":"No new annotations to add to ServiceAccount ibm-iam-operand-restricted; skipping","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"annotateServiceAccount"}
{"level":"info","ts":"2025-07-04T08:19:24Z","logger":"controller_oidc_client","msg":"Processing Zen instance registration for Client, if configured","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"processZenRegistration"}
{"level":"info","ts":"2025-07-04T08:19:24Z","logger":"controller_oidc_client","msg":"Deployment is available","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"processZenRegistration","Deployment.Name":"platform-identity-management","Deployment.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:24Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:25Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:25Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:25Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:25Z","logger":"controller_authentication","msg":"Creating or updating new secret","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Certificate.Namespace":"ibm-common-services","Secret.Name":"ibmcloud-cluster-ca-cert"}
{"level":"info","ts":"2025-07-04T08:19:25Z","logger":"controller_authentication","msg":"Waiting for secret","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Certificate.Namespace":"ibm-common-services","Secret.Name":"platform-auth-secret"}
{"level":"info","ts":"2025-07-04T08:19:25Z","logger":"controller_authentication","msg":"Comparing calculated to observed secret","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Secret.Name":"ibmcloud-cluster-ca-cert"}
{"level":"info","ts":"2025-07-04T08:19:25Z","logger":"controller_authentication","msg":"No significant changes found; skipping update.","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Secret.Name":"ibmcloud-cluster-ca-cert"}
{"level":"info","ts":"2025-07-04T08:19:25Z","logger":"controller_authentication","msg":"Query global cm","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Configmap.Namespace":"ibm-common-services","ConfigMap.Name":"ibm-cpp-config"}
{"level":"info","ts":"2025-07-04T08:19:25Z","msg":"Get cluster config"}
{"level":"info","ts":"2025-07-04T08:19:25Z","msg":"Got services namespace","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:25Z","msg":"Create client to query for ConfigMap"}
{"level":"info","ts":"2025-07-04T08:19:25Z","msg":"Try to find ConfigMap","name":"ibm-cpp-config","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:25Z","msg":"Found ConfigMap","name":"ibm-cpp-config","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:25Z","msg":"Looked for kubernetes_cluster_type","ok":false,"value":"","clusterType":"OpenShift"}
{"level":"info","ts":"2025-07-04T08:19:26Z","logger":"controller_authentication","msg":"ibmcloud-cluster-info Configmap is already created by IM operator","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Configmap.Namespace":"ibm-common-services","ConfigMap.Name":"ibmcloud-cluster-info"}
{"level":"info","ts":"2025-07-04T08:19:26Z","logger":"controller_authentication","msg":"Fetched cluster address from configmap","cluster_address":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com"}
{"level":"info","ts":"2025-07-04T08:19:26Z","logger":"controller_authentication","msg":"Current configmap","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Current Value":"true"}
{"level":"info","ts":"2025-07-04T08:19:28Z","logger":"controller_authentication","msg":"Calculated new platform-oidc-registration.json","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:28Z","logger":"controller_authentication","msg":"No ConfigMap update required","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:28Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted clusterrole","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:28Z","logger":"controller_authentication","msg":"Failed to create ibm-iam-operand-restricted clusterrole or its already present","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:28Z","logger":"controller_authentication","msg":"Ensure that the ClusterRoleBinding is created","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleClusterRoleBinding"}
{"level":"info","ts":"2025-07-04T08:19:28Z","logger":"controller_oidc_client","msg":"Zen registration already exists for oidc client - the zen instance will be updated","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"processZenRegistration","clientId":"6x8n0bebaimqvetunobgdixmb0ij9y7k","zenInstanceId":"2383fcd0-1ba7-431b-a2bf-4b8b4195e307"}
{"level":"info","ts":"2025-07-04T08:19:28Z","logger":"controller_authentication","msg":"ClusterRoleBinding already exists, continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleClusterRoleBinding","ClusterRoleBinding.Name":"ibm-iam-operand-restricted-ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:28Z","logger":"controller_authentication","msg":"ibm-iam-operand-restricted SA is updated with annotation successfully","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:28Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-oidc","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/oidc"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-oidc","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-oidc","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"saml-ui-callback","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/ibm/saml20/defaultSP"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"saml-ui-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"saml-ui-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"social-login-callback","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/ibm/api/social-login","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/ibm/api/social-login"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"social-login-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"social-login-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"id-mgmt","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/idmgmt/"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"id-mgmt","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"id-mgmt","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-auth","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/v1/auth/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/v1/auth/"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-id-auth","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/idauth"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-id-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-id-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-id-provider","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/idprovider/"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-id-provider","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-id-provider","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-login","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/v1/auth/authorize?client_id=1erzi4mw2l1ovp7fo33xssk8phvlbsuy&redirect_uri=https://cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com/auth/liberty/callback&response_type=code&scope=openid+email+profile&orig=/login","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/login"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-login","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-login","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Is SAAS enabled?","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Instance spec config value":false}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"Updating an existing Deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-auth-service"}
{"level":"info","ts":"2025-07-04T08:19:29Z","logger":"controller_authentication","msg":"SAAS tenant configmap was found","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Updating deployment with value from configmap":"cs-saas-tenant-config"}
{"level":"info","ts":"2025-07-04T08:19:30Z","logger":"controller_oidc_client","msg":"Marking Client Ready condition as \"True\"","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"updateStatus"}
{"level":"info","ts":"2025-07-04T08:19:30Z","logger":"controller_oidc_client","msg":"Updating Client status","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services","subreconciler":"updateStatus"}
{"level":"info","ts":"2025-07-04T08:19:30Z","logger":"controller_oidc_client","msg":"Reconciling Client CR complete","Request.Namespace":"ibm-common-services","Request.Name":"zenclient-ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:32Z","logger":"controller_authentication","msg":"CS??? get pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:32Z","logger":"controller_authentication","msg":"CS??? pod name=platform-auth-service-5c5fbc566-rrw9l","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2025-07-04T08:19:32Z","logger":"controller_authentication","msg":"Skip reconcile: Deployment already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-auth-service"}
{"level":"info","ts":"2025-07-04T08:19:32Z","logger":"controller_authentication","msg":"Reconcile: Looking for deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":{"name":""}}
{"level":"info","ts":"2025-07-04T08:19:32Z","logger":"controller_authentication","msg":"Updating an existing Deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-management"}
{"level":"info","ts":"2025-07-04T08:19:32Z","logger":"controller_authentication","msg":"SAAS tenant configmap was found","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Updating deployment with value from configmap":"cs-saas-tenant-config"}
{"level":"info","ts":"2025-07-04T08:19:32Z","logger":"KubeAPIWarningLogger","msg":"spec.template.metadata.annotations[scheduler.alpha.kubernetes.io/critical-pod]: non-functional in v1.16+; use the \"priorityClassName\" field instead"}
{"level":"info","ts":"2025-07-04T08:19:32Z","logger":"controller_authentication","msg":"CS??? get pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:32Z","logger":"controller_authentication","msg":"CS??? pod name=platform-identity-management-5c679f477b-9mkjt","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2025-07-04T08:19:32Z","logger":"controller_authentication","msg":"Skip reconcile: Manager deployment already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-management"}
{"level":"info","ts":"2025-07-04T08:19:32Z","logger":"controller_authentication","msg":"Reconcile: Looking for deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":{"name":""}}
{"level":"info","ts":"2025-07-04T08:19:32Z","logger":"controller_authentication","msg":"Updating an existing Deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-provider"}
{"level":"info","ts":"2025-07-04T08:19:32Z","logger":"controller_authentication","msg":"SAAS tenant configmap was found","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Updating deployment with value from configmap":"cs-saas-tenant-config"}
{"level":"info","ts":"2025-07-04T08:19:33Z","logger":"controller_authentication","msg":"CS??? get pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:33Z","logger":"controller_authentication","msg":"CS??? pod name=platform-identity-provider-5874568784-rd7p4","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2025-07-04T08:19:33Z","logger":"controller_authentication","msg":"Final pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Pod names:":["platform-auth-service-5c5fbc566-rrw9l","platform-identity-management-5c679f477b-9mkjt","platform-identity-provider-5874568784-rd7p4"]}
{"level":"info","ts":"2025-07-04T08:19:33Z","logger":"controller_authentication","msg":"CS??? put pod names in status","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:34Z","logger":"controller_authentication","msg":"Skip reconcile: Provider deployment already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-provider"}
{"level":"info","ts":"2025-07-04T08:19:34Z","logger":"controller_authentication","msg":"Update status before finishing loop.","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:34Z","logger":"controller_authentication","msg":"Updated status","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:34Z","logger":"controller_authentication","msg":"Reconciling Authentication","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:35Z","logger":"controller_authentication","msg":"Add finalizers to MongoDB resources in case migration is needed","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"addFinalizers"}
{"level":"info","ts":"2025-07-04T08:19:35Z","logger":"controller_authentication","msg":"No MongoDB migration required, so no need for finalizers; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"addFinalizers"}
{"level":"info","ts":"2025-07-04T08:19:35Z","logger":"controller_authentication","msg":"Does not need MongoDB migration; skipping","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"overrideMongoDBBootstrap"}
{"level":"info","ts":"2025-07-04T08:19:35Z","logger":"controller_authentication","msg":"Ensure that OperandRequest is updated with correct Operands","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleOperandRequest","OperandRequest.Name":"ibm-iam-request","OperandRequest.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:35Z","logger":"controller_authentication","msg":"No changes to OperandRequest; continue","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleOperandRequest","OperandRequest.Name":"ibm-iam-request","OperandRequest.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:35Z","logger":"controller_authentication","msg":"Create a CommonService CR for shared EDB claim","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:35Z","logger":"controller_authentication","msg":"CommonService CR for shared EDB claim already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","CommonServiceName":"im-common-service"}
{"level":"info","ts":"2025-07-04T08:19:35Z","logger":"controller_authentication","msg":"Ensure EDB datastore configuration resources available","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"ensureDatastoreSecretAndCM"}
{"level":"info","ts":"2025-07-04T08:19:35Z","logger":"controller_authentication","msg":"ConfigMap found","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"ensureDatastoreSecretAndCM","ConfigMap.Name":"im-datastore-edb-cm","ConfigMap.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:35Z","logger":"controller_authentication","msg":"Secret found","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"ensureDatastoreSecretAndCM","Secret.Name":"im-datastore-edb-secret","Secret.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:35Z","logger":"controller_authentication","msg":"Perform any pending migrations","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMigrations"}
{"level":"info","ts":"2025-07-04T08:19:35Z","logger":"controller_authentication","msg":"Retrieving change logs","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:35Z","logger":"controller_authentication","msg":"Connecting to PostgresDB","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","PostgresDB.Host":"common-service-db-rw.ibm-common-services.svc","PostgresDB.Port":"5432"}
{"level":"info","ts":"2025-07-04T08:19:35Z","logger":"controller_authentication","msg":"No active or pending migrations; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMigrations"}
{"level":"info","ts":"2025-07-04T08:19:35Z","logger":"controller_authentication","msg":"Set the migration success condition if it is not already set","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"setMigrationCompleteStatus"}
{"level":"info","ts":"2025-07-04T08:19:35Z","logger":"controller_authentication","msg":"MigrationsPerformed condition has already been set; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"setMigrationCompleteStatus"}
{"level":"info","ts":"2025-07-04T08:19:35Z","logger":"controller_authentication","msg":"Clean up MongoDB resources if no longer needed","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMongoDBCleanup"}
{"level":"info","ts":"2025-07-04T08:19:35Z","logger":"controller_authentication","msg":"Condition indicates migrations have completed","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMongoDBCleanup"}
{"level":"info","ts":"2025-07-04T08:19:36Z","logger":"controller_authentication","msg":"No cleanup was necessary; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMongoDBCleanup"}
{"level":"info","ts":"2025-07-04T08:19:36Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted serviceaccount","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:36Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted role","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:36Z","logger":"controller_authentication","msg":"Failed to create ibm-iam-operand-restricted role or its already present","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:36Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted RoleBinding","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:36Z","logger":"controller_authentication","msg":"Failed to create ibm-iam-operand-restricted RoleBinding or its already present","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:36Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:36Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:36Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:36Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:36Z","logger":"controller_authentication","msg":"Creating or updating new secret","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Certificate.Namespace":"ibm-common-services","Secret.Name":"ibmcloud-cluster-ca-cert"}
{"level":"info","ts":"2025-07-04T08:19:36Z","logger":"controller_authentication","msg":"Waiting for secret","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Certificate.Namespace":"ibm-common-services","Secret.Name":"platform-auth-secret"}
{"level":"info","ts":"2025-07-04T08:19:36Z","logger":"controller_authentication","msg":"Comparing calculated to observed secret","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Secret.Name":"ibmcloud-cluster-ca-cert"}
{"level":"info","ts":"2025-07-04T08:19:36Z","logger":"controller_authentication","msg":"No significant changes found; skipping update.","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Secret.Name":"ibmcloud-cluster-ca-cert"}
{"level":"info","ts":"2025-07-04T08:19:36Z","logger":"controller_authentication","msg":"Query global cm","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Configmap.Namespace":"ibm-common-services","ConfigMap.Name":"ibm-cpp-config"}
{"level":"info","ts":"2025-07-04T08:19:36Z","msg":"Get cluster config"}
{"level":"info","ts":"2025-07-04T08:19:36Z","msg":"Got services namespace","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:36Z","msg":"Create client to query for ConfigMap"}
{"level":"info","ts":"2025-07-04T08:19:36Z","msg":"Try to find ConfigMap","name":"ibm-cpp-config","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:36Z","msg":"Found ConfigMap","name":"ibm-cpp-config","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:36Z","msg":"Looked for kubernetes_cluster_type","ok":false,"value":"","clusterType":"OpenShift"}
{"level":"info","ts":"2025-07-04T08:19:36Z","logger":"controller_authentication","msg":"ibmcloud-cluster-info Configmap is already created by IM operator","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Configmap.Namespace":"ibm-common-services","ConfigMap.Name":"ibmcloud-cluster-info"}
{"level":"info","ts":"2025-07-04T08:19:36Z","logger":"controller_authentication","msg":"Fetched cluster address from configmap","cluster_address":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com"}
{"level":"info","ts":"2025-07-04T08:19:36Z","logger":"controller_authentication","msg":"Current configmap","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Current Value":"true"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Calculated new platform-oidc-registration.json","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"No ConfigMap update required","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted clusterrole","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Failed to create ibm-iam-operand-restricted clusterrole or its already present","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Ensure that the ClusterRoleBinding is created","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleClusterRoleBinding"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"ClusterRoleBinding already exists, continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleClusterRoleBinding","ClusterRoleBinding.Name":"ibm-iam-operand-restricted-ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"ibm-iam-operand-restricted SA is updated with annotation successfully","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"id-mgmt","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/idmgmt/"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"id-mgmt","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"id-mgmt","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-auth","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/v1/auth/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/v1/auth/"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-id-auth","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/idauth"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-id-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-id-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-id-provider","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/idprovider/"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-id-provider","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-id-provider","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-login","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/v1/auth/authorize?client_id=1erzi4mw2l1ovp7fo33xssk8phvlbsuy&redirect_uri=https://cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com/auth/liberty/callback&response_type=code&scope=openid+email+profile&orig=/login","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/login"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-login","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-login","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-oidc","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/oidc"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-oidc","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-oidc","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"saml-ui-callback","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/ibm/saml20/defaultSP"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"saml-ui-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"saml-ui-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"social-login-callback","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/ibm/api/social-login","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/ibm/api/social-login"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"social-login-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"social-login-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Is SAAS enabled?","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Instance spec config value":false}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Updating an existing Deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-auth-service"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"SAAS tenant configmap was found","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Updating deployment with value from configmap":"cs-saas-tenant-config"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"CS??? get pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"CS??? pod name=platform-auth-service-5c5fbc566-rrw9l","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Skip reconcile: Deployment already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-auth-service"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Reconcile: Looking for deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":{"name":""}}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Updating an existing Deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-management"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"SAAS tenant configmap was found","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Updating deployment with value from configmap":"cs-saas-tenant-config"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"CS??? get pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"CS??? pod name=platform-identity-management-5c679f477b-9mkjt","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"CS??? pod name=platform-identity-management-74d6cbfc44-xqcgq","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Skip reconcile: Manager deployment already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-management"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Reconcile: Looking for deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":{"name":""}}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"Updating an existing Deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-provider"}
{"level":"info","ts":"2025-07-04T08:19:37Z","logger":"controller_authentication","msg":"SAAS tenant configmap was found","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Updating deployment with value from configmap":"cs-saas-tenant-config"}
{"level":"info","ts":"2025-07-04T08:19:38Z","logger":"controller_authentication","msg":"CS??? get pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:38Z","logger":"controller_authentication","msg":"CS??? pod name=platform-identity-provider-5874568784-rd7p4","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2025-07-04T08:19:38Z","logger":"controller_authentication","msg":"Final pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Pod names:":["platform-auth-service-5c5fbc566-rrw9l","platform-identity-management-5c679f477b-9mkjt","platform-identity-management-74d6cbfc44-xqcgq","platform-identity-provider-5874568784-rd7p4"]}
{"level":"info","ts":"2025-07-04T08:19:38Z","logger":"controller_authentication","msg":"CS??? put pod names in status","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:38Z","logger":"controller_authentication","msg":"Skip reconcile: Provider deployment already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-provider"}
{"level":"info","ts":"2025-07-04T08:19:38Z","logger":"controller_authentication","msg":"Update status before finishing loop.","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:38Z","logger":"controller_authentication","msg":"Updated status","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:38Z","logger":"controller_authentication","msg":"Reconciling Authentication","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:38Z","logger":"controller_authentication","msg":"Add finalizers to MongoDB resources in case migration is needed","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"addFinalizers"}
{"level":"info","ts":"2025-07-04T08:19:38Z","logger":"controller_authentication","msg":"No MongoDB migration required, so no need for finalizers; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"addFinalizers"}
{"level":"info","ts":"2025-07-04T08:19:38Z","logger":"controller_authentication","msg":"Does not need MongoDB migration; skipping","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"overrideMongoDBBootstrap"}
{"level":"info","ts":"2025-07-04T08:19:38Z","logger":"controller_authentication","msg":"Ensure that OperandRequest is updated with correct Operands","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleOperandRequest","OperandRequest.Name":"ibm-iam-request","OperandRequest.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:39Z","logger":"controller_authentication","msg":"No changes to OperandRequest; continue","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleOperandRequest","OperandRequest.Name":"ibm-iam-request","OperandRequest.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:39Z","logger":"controller_authentication","msg":"Create a CommonService CR for shared EDB claim","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:39Z","logger":"controller_authentication","msg":"CommonService CR for shared EDB claim already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","CommonServiceName":"im-common-service"}
{"level":"info","ts":"2025-07-04T08:19:39Z","logger":"controller_authentication","msg":"Ensure EDB datastore configuration resources available","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"ensureDatastoreSecretAndCM"}
{"level":"info","ts":"2025-07-04T08:19:39Z","logger":"controller_authentication","msg":"ConfigMap found","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"ensureDatastoreSecretAndCM","ConfigMap.Name":"im-datastore-edb-cm","ConfigMap.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:39Z","logger":"controller_authentication","msg":"Secret found","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"ensureDatastoreSecretAndCM","Secret.Name":"im-datastore-edb-secret","Secret.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:39Z","logger":"controller_authentication","msg":"Perform any pending migrations","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMigrations"}
{"level":"info","ts":"2025-07-04T08:19:39Z","logger":"controller_authentication","msg":"Retrieving change logs","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:39Z","logger":"controller_authentication","msg":"Connecting to PostgresDB","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","PostgresDB.Host":"common-service-db-rw.ibm-common-services.svc","PostgresDB.Port":"5432"}
{"level":"info","ts":"2025-07-04T08:19:40Z","logger":"controller_authentication","msg":"No active or pending migrations; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMigrations"}
{"level":"info","ts":"2025-07-04T08:19:40Z","logger":"controller_authentication","msg":"Set the migration success condition if it is not already set","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"setMigrationCompleteStatus"}
{"level":"info","ts":"2025-07-04T08:19:40Z","logger":"controller_authentication","msg":"MigrationsPerformed condition has already been set; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"setMigrationCompleteStatus"}
{"level":"info","ts":"2025-07-04T08:19:40Z","logger":"controller_authentication","msg":"Clean up MongoDB resources if no longer needed","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMongoDBCleanup"}
{"level":"info","ts":"2025-07-04T08:19:40Z","logger":"controller_authentication","msg":"Condition indicates migrations have completed","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMongoDBCleanup"}
{"level":"info","ts":"2025-07-04T08:19:40Z","logger":"controller_authentication","msg":"No cleanup was necessary; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMongoDBCleanup"}
{"level":"info","ts":"2025-07-04T08:19:40Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted serviceaccount","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:40Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted role","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:41Z","logger":"controller_authentication","msg":"Failed to create ibm-iam-operand-restricted role or its already present","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:41Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted RoleBinding","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:41Z","logger":"controller_authentication","msg":"Failed to create ibm-iam-operand-restricted RoleBinding or its already present","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:41Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:41Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:41Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:41Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:41Z","logger":"controller_authentication","msg":"Creating or updating new secret","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Certificate.Namespace":"ibm-common-services","Secret.Name":"ibmcloud-cluster-ca-cert"}
{"level":"info","ts":"2025-07-04T08:19:41Z","logger":"controller_authentication","msg":"Waiting for secret","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Certificate.Namespace":"ibm-common-services","Secret.Name":"platform-auth-secret"}
{"level":"info","ts":"2025-07-04T08:19:41Z","logger":"controller_authentication","msg":"Comparing calculated to observed secret","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Secret.Name":"ibmcloud-cluster-ca-cert"}
{"level":"info","ts":"2025-07-04T08:19:41Z","logger":"controller_authentication","msg":"No significant changes found; skipping update.","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Secret.Name":"ibmcloud-cluster-ca-cert"}
{"level":"info","ts":"2025-07-04T08:19:41Z","logger":"controller_authentication","msg":"Query global cm","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Configmap.Namespace":"ibm-common-services","ConfigMap.Name":"ibm-cpp-config"}
{"level":"info","ts":"2025-07-04T08:19:41Z","msg":"Get cluster config"}
{"level":"info","ts":"2025-07-04T08:19:41Z","msg":"Got services namespace","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:41Z","msg":"Create client to query for ConfigMap"}
{"level":"info","ts":"2025-07-04T08:19:41Z","msg":"Try to find ConfigMap","name":"ibm-cpp-config","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:41Z","msg":"Found ConfigMap","name":"ibm-cpp-config","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:41Z","msg":"Looked for kubernetes_cluster_type","ok":false,"value":"","clusterType":"OpenShift"}
{"level":"info","ts":"2025-07-04T08:19:41Z","logger":"controller_authentication","msg":"ibmcloud-cluster-info Configmap is already created by IM operator","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Configmap.Namespace":"ibm-common-services","ConfigMap.Name":"ibmcloud-cluster-info"}
{"level":"info","ts":"2025-07-04T08:19:41Z","logger":"controller_authentication","msg":"Fetched cluster address from configmap","cluster_address":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com"}
{"level":"info","ts":"2025-07-04T08:19:41Z","logger":"controller_authentication","msg":"Current configmap","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Current Value":"true"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Calculated new platform-oidc-registration.json","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"No ConfigMap update required","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted clusterrole","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Failed to create ibm-iam-operand-restricted clusterrole or its already present","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Ensure that the ClusterRoleBinding is created","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleClusterRoleBinding"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"ClusterRoleBinding already exists, continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleClusterRoleBinding","ClusterRoleBinding.Name":"ibm-iam-operand-restricted-ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"ibm-iam-operand-restricted SA is updated with annotation successfully","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-auth","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/v1/auth/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/v1/auth/"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-id-auth","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/idauth"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-id-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-id-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-id-provider","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/idprovider/"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-id-provider","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-id-provider","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-login","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/v1/auth/authorize?client_id=1erzi4mw2l1ovp7fo33xssk8phvlbsuy&redirect_uri=https://cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com/auth/liberty/callback&response_type=code&scope=openid+email+profile&orig=/login","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/login"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-login","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-login","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-oidc","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/oidc"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-oidc","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-oidc","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"saml-ui-callback","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/ibm/saml20/defaultSP"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"saml-ui-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"saml-ui-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"social-login-callback","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/ibm/api/social-login","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/ibm/api/social-login"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"social-login-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"social-login-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"id-mgmt","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/idmgmt/"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"id-mgmt","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"id-mgmt","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Is SAAS enabled?","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Instance spec config value":false}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Updating an existing Deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-auth-service"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"SAAS tenant configmap was found","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Updating deployment with value from configmap":"cs-saas-tenant-config"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"CS??? get pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"CS??? pod name=platform-auth-service-5c5fbc566-rrw9l","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Skip reconcile: Deployment already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-auth-service"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Reconcile: Looking for deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":{"name":""}}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Updating an existing Deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-management"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"SAAS tenant configmap was found","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Updating deployment with value from configmap":"cs-saas-tenant-config"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"CS??? get pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"CS??? pod name=platform-identity-management-74d6cbfc44-xqcgq","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"CS??? pod name=platform-identity-management-5c679f477b-9mkjt","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Skip reconcile: Manager deployment already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-management"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Reconcile: Looking for deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":{"name":""}}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Updating an existing Deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-provider"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"SAAS tenant configmap was found","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Updating deployment with value from configmap":"cs-saas-tenant-config"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"CS??? get pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"CS??? pod name=platform-identity-provider-5874568784-rd7p4","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"Final pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Pod names:":["platform-auth-service-5c5fbc566-rrw9l","platform-identity-management-74d6cbfc44-xqcgq","platform-identity-management-5c679f477b-9mkjt","platform-identity-provider-5874568784-rd7p4"]}
{"level":"info","ts":"2025-07-04T08:19:42Z","logger":"controller_authentication","msg":"CS??? put pod names in status","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:43Z","logger":"controller_authentication","msg":"Skip reconcile: Provider deployment already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-provider"}
{"level":"info","ts":"2025-07-04T08:19:43Z","logger":"controller_authentication","msg":"Update status before finishing loop.","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:43Z","logger":"controller_authentication","msg":"Updated status","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:43Z","logger":"controller_authentication","msg":"Reconciling Authentication","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:43Z","logger":"controller_authentication","msg":"Add finalizers to MongoDB resources in case migration is needed","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"addFinalizers"}
{"level":"info","ts":"2025-07-04T08:19:43Z","logger":"controller_authentication","msg":"No MongoDB migration required, so no need for finalizers; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"addFinalizers"}
{"level":"info","ts":"2025-07-04T08:19:43Z","logger":"controller_authentication","msg":"Does not need MongoDB migration; skipping","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"overrideMongoDBBootstrap"}
{"level":"info","ts":"2025-07-04T08:19:43Z","logger":"controller_authentication","msg":"Ensure that OperandRequest is updated with correct Operands","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleOperandRequest","OperandRequest.Name":"ibm-iam-request","OperandRequest.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:43Z","logger":"controller_authentication","msg":"No changes to OperandRequest; continue","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleOperandRequest","OperandRequest.Name":"ibm-iam-request","OperandRequest.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:43Z","logger":"controller_authentication","msg":"Create a CommonService CR for shared EDB claim","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:44Z","logger":"controller_authentication","msg":"CommonService CR for shared EDB claim already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","CommonServiceName":"im-common-service"}
{"level":"info","ts":"2025-07-04T08:19:44Z","logger":"controller_authentication","msg":"Ensure EDB datastore configuration resources available","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"ensureDatastoreSecretAndCM"}
{"level":"info","ts":"2025-07-04T08:19:44Z","logger":"controller_authentication","msg":"ConfigMap found","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"ensureDatastoreSecretAndCM","ConfigMap.Name":"im-datastore-edb-cm","ConfigMap.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:44Z","logger":"controller_authentication","msg":"Secret found","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"ensureDatastoreSecretAndCM","Secret.Name":"im-datastore-edb-secret","Secret.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:44Z","logger":"controller_authentication","msg":"Perform any pending migrations","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMigrations"}
{"level":"info","ts":"2025-07-04T08:19:44Z","logger":"controller_authentication","msg":"Retrieving change logs","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:44Z","logger":"controller_authentication","msg":"Connecting to PostgresDB","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","PostgresDB.Host":"common-service-db-rw.ibm-common-services.svc","PostgresDB.Port":"5432"}
{"level":"info","ts":"2025-07-04T08:19:44Z","logger":"controller_authentication","msg":"No active or pending migrations; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMigrations"}
{"level":"info","ts":"2025-07-04T08:19:44Z","logger":"controller_authentication","msg":"Set the migration success condition if it is not already set","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"setMigrationCompleteStatus"}
{"level":"info","ts":"2025-07-04T08:19:44Z","logger":"controller_authentication","msg":"MigrationsPerformed condition has already been set; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"setMigrationCompleteStatus"}
{"level":"info","ts":"2025-07-04T08:19:44Z","logger":"controller_authentication","msg":"Clean up MongoDB resources if no longer needed","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMongoDBCleanup"}
{"level":"info","ts":"2025-07-04T08:19:44Z","logger":"controller_authentication","msg":"Condition indicates migrations have completed","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMongoDBCleanup"}
{"level":"info","ts":"2025-07-04T08:19:45Z","logger":"controller_authentication","msg":"No cleanup was necessary; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMongoDBCleanup"}
{"level":"info","ts":"2025-07-04T08:19:45Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted serviceaccount","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:45Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted role","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:45Z","logger":"controller_authentication","msg":"Failed to create ibm-iam-operand-restricted role or its already present","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:45Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted RoleBinding","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:45Z","logger":"controller_authentication","msg":"Failed to create ibm-iam-operand-restricted RoleBinding or its already present","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:45Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:45Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:45Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:45Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:45Z","logger":"controller_authentication","msg":"Creating or updating new secret","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Certificate.Namespace":"ibm-common-services","Secret.Name":"ibmcloud-cluster-ca-cert"}
{"level":"info","ts":"2025-07-04T08:19:45Z","logger":"controller_authentication","msg":"Waiting for secret","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Certificate.Namespace":"ibm-common-services","Secret.Name":"platform-auth-secret"}
{"level":"info","ts":"2025-07-04T08:19:45Z","logger":"controller_authentication","msg":"Comparing calculated to observed secret","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Secret.Name":"ibmcloud-cluster-ca-cert"}
{"level":"info","ts":"2025-07-04T08:19:45Z","logger":"controller_authentication","msg":"No significant changes found; skipping update.","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Secret.Name":"ibmcloud-cluster-ca-cert"}
{"level":"info","ts":"2025-07-04T08:19:45Z","logger":"controller_authentication","msg":"Query global cm","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Configmap.Namespace":"ibm-common-services","ConfigMap.Name":"ibm-cpp-config"}
{"level":"info","ts":"2025-07-04T08:19:45Z","msg":"Get cluster config"}
{"level":"info","ts":"2025-07-04T08:19:45Z","msg":"Got services namespace","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:45Z","msg":"Create client to query for ConfigMap"}
{"level":"info","ts":"2025-07-04T08:19:45Z","msg":"Try to find ConfigMap","name":"ibm-cpp-config","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:45Z","msg":"Found ConfigMap","name":"ibm-cpp-config","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:45Z","msg":"Looked for kubernetes_cluster_type","ok":false,"value":"","clusterType":"OpenShift"}
{"level":"info","ts":"2025-07-04T08:19:45Z","logger":"controller_authentication","msg":"ibmcloud-cluster-info Configmap is already created by IM operator","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Configmap.Namespace":"ibm-common-services","ConfigMap.Name":"ibmcloud-cluster-info"}
{"level":"info","ts":"2025-07-04T08:19:45Z","logger":"controller_authentication","msg":"Fetched cluster address from configmap","cluster_address":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com"}
{"level":"info","ts":"2025-07-04T08:19:45Z","logger":"controller_authentication","msg":"Current configmap","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Current Value":"true"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Calculated new platform-oidc-registration.json","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"No ConfigMap update required","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted clusterrole","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Failed to create ibm-iam-operand-restricted clusterrole or its already present","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Ensure that the ClusterRoleBinding is created","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleClusterRoleBinding"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"ClusterRoleBinding already exists, continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleClusterRoleBinding","ClusterRoleBinding.Name":"ibm-iam-operand-restricted-ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"ibm-iam-operand-restricted SA is updated with annotation successfully","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-auth","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/v1/auth/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/v1/auth/"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-id-auth","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/idauth"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-id-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-id-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-id-provider","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/idprovider/"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-id-provider","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-id-provider","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-login","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/v1/auth/authorize?client_id=1erzi4mw2l1ovp7fo33xssk8phvlbsuy&redirect_uri=https://cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com/auth/liberty/callback&response_type=code&scope=openid+email+profile&orig=/login","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/login"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-login","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-login","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-oidc","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/oidc"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-oidc","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-oidc","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"saml-ui-callback","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/ibm/saml20/defaultSP"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"saml-ui-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"saml-ui-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"social-login-callback","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/ibm/api/social-login","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/ibm/api/social-login"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"social-login-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"social-login-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"id-mgmt","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/idmgmt/"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"id-mgmt","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"id-mgmt","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Is SAAS enabled?","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Instance spec config value":false}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"Updating an existing Deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-auth-service"}
{"level":"info","ts":"2025-07-04T08:19:47Z","logger":"controller_authentication","msg":"SAAS tenant configmap was found","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Updating deployment with value from configmap":"cs-saas-tenant-config"}
{"level":"info","ts":"2025-07-04T08:19:48Z","logger":"controller_authentication","msg":"CS??? get pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:48Z","logger":"controller_authentication","msg":"CS??? pod name=platform-auth-service-5c5fbc566-rrw9l","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2025-07-04T08:19:48Z","logger":"controller_authentication","msg":"Skip reconcile: Deployment already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-auth-service"}
{"level":"info","ts":"2025-07-04T08:19:48Z","logger":"controller_authentication","msg":"Reconcile: Looking for deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":{"name":""}}
{"level":"info","ts":"2025-07-04T08:19:48Z","logger":"controller_authentication","msg":"Updating an existing Deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-management"}
{"level":"info","ts":"2025-07-04T08:19:48Z","logger":"controller_authentication","msg":"SAAS tenant configmap was found","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Updating deployment with value from configmap":"cs-saas-tenant-config"}
{"level":"info","ts":"2025-07-04T08:19:48Z","logger":"controller_authentication","msg":"CS??? get pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:48Z","logger":"controller_authentication","msg":"CS??? pod name=platform-identity-management-5c679f477b-9mkjt","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2025-07-04T08:19:48Z","logger":"controller_authentication","msg":"CS??? pod name=platform-identity-management-74d6cbfc44-xqcgq","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2025-07-04T08:19:48Z","logger":"controller_authentication","msg":"Skip reconcile: Manager deployment already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-management"}
{"level":"info","ts":"2025-07-04T08:19:48Z","logger":"controller_authentication","msg":"Reconcile: Looking for deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":{"name":""}}
{"level":"info","ts":"2025-07-04T08:19:48Z","logger":"controller_authentication","msg":"Updating an existing Deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-provider"}
{"level":"info","ts":"2025-07-04T08:19:48Z","logger":"controller_authentication","msg":"SAAS tenant configmap was found","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Updating deployment with value from configmap":"cs-saas-tenant-config"}
{"level":"info","ts":"2025-07-04T08:19:48Z","logger":"controller_authentication","msg":"CS??? get pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:48Z","logger":"controller_authentication","msg":"CS??? pod name=platform-identity-provider-5874568784-rd7p4","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2025-07-04T08:19:48Z","logger":"controller_authentication","msg":"Final pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Pod names:":["platform-auth-service-5c5fbc566-rrw9l","platform-identity-management-5c679f477b-9mkjt","platform-identity-management-74d6cbfc44-xqcgq","platform-identity-provider-5874568784-rd7p4"]}
{"level":"info","ts":"2025-07-04T08:19:48Z","logger":"controller_authentication","msg":"CS??? put pod names in status","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:48Z","logger":"controller_authentication","msg":"Skip reconcile: Provider deployment already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-provider"}
{"level":"info","ts":"2025-07-04T08:19:48Z","logger":"controller_authentication","msg":"Update status before finishing loop.","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:49Z","logger":"controller_authentication","msg":"Updated status","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:49Z","logger":"controller_authentication","msg":"Reconciling Authentication","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:49Z","logger":"controller_authentication","msg":"Add finalizers to MongoDB resources in case migration is needed","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"addFinalizers"}
{"level":"info","ts":"2025-07-04T08:19:49Z","logger":"controller_authentication","msg":"No MongoDB migration required, so no need for finalizers; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"addFinalizers"}
{"level":"info","ts":"2025-07-04T08:19:49Z","logger":"controller_authentication","msg":"Does not need MongoDB migration; skipping","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"overrideMongoDBBootstrap"}
{"level":"info","ts":"2025-07-04T08:19:49Z","logger":"controller_authentication","msg":"Ensure that OperandRequest is updated with correct Operands","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleOperandRequest","OperandRequest.Name":"ibm-iam-request","OperandRequest.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:49Z","logger":"controller_authentication","msg":"No changes to OperandRequest; continue","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleOperandRequest","OperandRequest.Name":"ibm-iam-request","OperandRequest.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:49Z","logger":"controller_authentication","msg":"Create a CommonService CR for shared EDB claim","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:49Z","logger":"controller_authentication","msg":"CommonService CR for shared EDB claim already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","CommonServiceName":"im-common-service"}
{"level":"info","ts":"2025-07-04T08:19:49Z","logger":"controller_authentication","msg":"Ensure EDB datastore configuration resources available","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"ensureDatastoreSecretAndCM"}
{"level":"info","ts":"2025-07-04T08:19:49Z","logger":"controller_authentication","msg":"ConfigMap found","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"ensureDatastoreSecretAndCM","ConfigMap.Name":"im-datastore-edb-cm","ConfigMap.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:49Z","logger":"controller_authentication","msg":"Secret found","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"ensureDatastoreSecretAndCM","Secret.Name":"im-datastore-edb-secret","Secret.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:49Z","logger":"controller_authentication","msg":"Perform any pending migrations","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMigrations"}
{"level":"info","ts":"2025-07-04T08:19:49Z","logger":"controller_authentication","msg":"Retrieving change logs","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:49Z","logger":"controller_authentication","msg":"Connecting to PostgresDB","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","PostgresDB.Host":"common-service-db-rw.ibm-common-services.svc","PostgresDB.Port":"5432"}
{"level":"info","ts":"2025-07-04T08:19:50Z","logger":"controller_authentication","msg":"No active or pending migrations; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMigrations"}
{"level":"info","ts":"2025-07-04T08:19:50Z","logger":"controller_authentication","msg":"Set the migration success condition if it is not already set","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"setMigrationCompleteStatus"}
{"level":"info","ts":"2025-07-04T08:19:50Z","logger":"controller_authentication","msg":"MigrationsPerformed condition has already been set; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"setMigrationCompleteStatus"}
{"level":"info","ts":"2025-07-04T08:19:50Z","logger":"controller_authentication","msg":"Clean up MongoDB resources if no longer needed","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMongoDBCleanup"}
{"level":"info","ts":"2025-07-04T08:19:50Z","logger":"controller_authentication","msg":"Condition indicates migrations have completed","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMongoDBCleanup"}
{"level":"info","ts":"2025-07-04T08:19:50Z","logger":"controller_authentication","msg":"No cleanup was necessary; continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleMongoDBCleanup"}
{"level":"info","ts":"2025-07-04T08:19:50Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted serviceaccount","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:50Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted role","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:50Z","logger":"controller_authentication","msg":"Failed to create ibm-iam-operand-restricted role or its already present","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:50Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted RoleBinding","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:51Z","logger":"controller_authentication","msg":"Failed to create ibm-iam-operand-restricted RoleBinding or its already present","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:51Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:51Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:51Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:51Z","logger":"controller_authentication","msg":"Unable to load v1alpha1 certificate - most likely this means the CRD doesn't exist and this can be ignored","func":"deleteCertsv1alpha1","instance.Name":"example-authentication","instance.Namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:51Z","logger":"controller_authentication","msg":"Creating or updating new secret","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Certificate.Namespace":"ibm-common-services","Secret.Name":"ibmcloud-cluster-ca-cert"}
{"level":"info","ts":"2025-07-04T08:19:51Z","logger":"controller_authentication","msg":"Waiting for secret","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Certificate.Namespace":"ibm-common-services","Secret.Name":"platform-auth-secret"}
{"level":"info","ts":"2025-07-04T08:19:51Z","logger":"controller_authentication","msg":"Comparing calculated to observed secret","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Secret.Name":"ibmcloud-cluster-ca-cert"}
{"level":"info","ts":"2025-07-04T08:19:51Z","logger":"controller_authentication","msg":"No significant changes found; skipping update.","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Secret.Name":"ibmcloud-cluster-ca-cert"}
{"level":"info","ts":"2025-07-04T08:19:51Z","logger":"controller_authentication","msg":"Query global cm","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Configmap.Namespace":"ibm-common-services","ConfigMap.Name":"ibm-cpp-config"}
{"level":"info","ts":"2025-07-04T08:19:51Z","msg":"Get cluster config"}
{"level":"info","ts":"2025-07-04T08:19:51Z","msg":"Got services namespace","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:51Z","msg":"Create client to query for ConfigMap"}
{"level":"info","ts":"2025-07-04T08:19:51Z","msg":"Try to find ConfigMap","name":"ibm-cpp-config","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:51Z","msg":"Found ConfigMap","name":"ibm-cpp-config","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:51Z","msg":"Looked for kubernetes_cluster_type","ok":false,"value":"","clusterType":"OpenShift"}
{"level":"info","ts":"2025-07-04T08:19:51Z","logger":"controller_authentication","msg":"ibmcloud-cluster-info Configmap is already created by IM operator","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Configmap.Namespace":"ibm-common-services","ConfigMap.Name":"ibmcloud-cluster-info"}
{"level":"info","ts":"2025-07-04T08:19:51Z","logger":"controller_authentication","msg":"Fetched cluster address from configmap","cluster_address":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com"}
{"level":"info","ts":"2025-07-04T08:19:51Z","logger":"controller_authentication","msg":"Current configmap","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Current Value":"true"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Calculated new platform-oidc-registration.json","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"No ConfigMap update required","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Creating ibm-iam-operand-restricted clusterrole","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Failed to create ibm-iam-operand-restricted clusterrole or its already present","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Ensure that the ClusterRoleBinding is created","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleClusterRoleBinding"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"ClusterRoleBinding already exists, continuing","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication","subreconciler":"handleClusterRoleBinding","ClusterRoleBinding.Name":"ibm-iam-operand-restricted-ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"ibm-iam-operand-restricted SA is updated with annotation successfully","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-login","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/v1/auth/authorize?client_id=1erzi4mw2l1ovp7fo33xssk8phvlbsuy&redirect_uri=https://cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com/auth/liberty/callback&response_type=code&scope=openid+email+profile&orig=/login","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/login"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-login","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-login","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-oidc","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/oidc"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-oidc","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-oidc","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"saml-ui-callback","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/ibm/saml20/defaultSP"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"saml-ui-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"saml-ui-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"social-login-callback","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/ibm/api/social-login","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/ibm/api/social-login"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"social-login-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"social-login-callback","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"id-mgmt","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/idmgmt/"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"id-mgmt","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"id-mgmt","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-auth","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/v1/auth/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/v1/auth/"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-id-auth","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/balance":"source","haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/idauth"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-id-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-id-auth","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Reconciling route","func":"ReconcileRoute","name":"platform-id-provider","namespace":"ibm-common-services","annotations":{"haproxy.router.openshift.io/hsts_header":"max-age=31536000;includeSubDomains","haproxy.router.openshift.io/pod-concurrent-connections":"200","haproxy.router.openshift.io/rate-limit-connections":"true","haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp":"200","haproxy.router.openshift.io/rate-limit-connections.rate-http":"200","haproxy.router.openshift.io/rate-limit-connections.rate-tcp":"200","haproxy.router.openshift.io/rewrite-target":"/","haproxy.router.openshift.io/timeout":"180s"},"routeHost":"cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com","routePath":"/idprovider/"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Comparing current and desired routes","func":"ReconcileRoute","name":"platform-id-provider","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Routes are equal","func":"IsRouteEqual","name":"platform-id-provider","namespace":"ibm-common-services"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Is SAAS enabled?","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Instance spec config value":false}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Updating an existing Deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-auth-service"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"SAAS tenant configmap was found","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Updating deployment with value from configmap":"cs-saas-tenant-config"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"CS??? get pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"CS??? pod name=platform-auth-service-5c5fbc566-rrw9l","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Skip reconcile: Deployment already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-auth-service"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Reconcile: Looking for deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":{"name":""}}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Updating an existing Deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-management"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"SAAS tenant configmap was found","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Updating deployment with value from configmap":"cs-saas-tenant-config"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"CS??? get pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"CS??? pod name=platform-identity-management-5c679f477b-9mkjt","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"CS??? pod name=platform-identity-management-74d6cbfc44-xqcgq","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Skip reconcile: Manager deployment already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-management"}
{"level":"info","ts":"2025-07-04T08:19:52Z","logger":"controller_authentication","msg":"Reconcile: Looking for deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":{"name":""}}
{"level":"info","ts":"2025-07-04T08:19:53Z","logger":"controller_authentication","msg":"Updating an existing Deployment","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-provider"}
{"level":"info","ts":"2025-07-04T08:19:53Z","logger":"controller_authentication","msg":"SAAS tenant configmap was found","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Updating deployment with value from configmap":"cs-saas-tenant-config"}
{"level":"info","ts":"2025-07-04T08:19:53Z","logger":"controller_authentication","msg":"CS??? get pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:53Z","logger":"controller_authentication","msg":"CS??? pod name=platform-identity-provider-5874568784-rd7p4","Request.Namespace":"CS??? namespace","Request.Name":"CS???"}
{"level":"info","ts":"2025-07-04T08:19:53Z","logger":"controller_authentication","msg":"Final pod names","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Pod names:":["platform-auth-service-5c5fbc566-rrw9l","platform-identity-management-5c679f477b-9mkjt","platform-identity-management-74d6cbfc44-xqcgq","platform-identity-provider-5874568784-rd7p4"]}
{"level":"info","ts":"2025-07-04T08:19:53Z","logger":"controller_authentication","msg":"Skip reconcile: Provider deployment already exists","Instance.Namespace":"ibm-common-services","Instance.Name":"example-authentication","Deployment.Namespace":"ibm-common-services","Deployment.Name":"platform-identity-provider"}
{"level":"info","ts":"2025-07-04T08:19:53Z","logger":"controller_authentication","msg":"Update status before finishing loop.","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
{"level":"info","ts":"2025-07-04T08:19:54Z","logger":"controller_authentication","msg":"Updated status","Request.Namespace":"ibm-common-services","Request.Name":"example-authentication"}
^Z
zsh: suspended  oc logs -f ibm-iam-operator-8884c688f-bxrfn -c ibm-iam-operator

@YangShyrMei
Copy link
Collaborator

Regression test:

Triggered regression with these changes,
Travis job: https://v3.travis.ibm.com/github/IBMPrivateCloud/security-test-automation/builds/42858369

Regression job had a single failure as the pod didn't restart on time but it passed when tested locally.
image

Scim job had a few extra failures which passed with tested locally. Therefore, Regression is clean.

info: Check deployment
info: Checking Deployment platform-auth-service to see if replicas are ready
info: Checking Deployment platform-identity-provider to see if replicas are ready
info: Checking Deployment platform-identity-management to see if replicas are ready
info: All 1 replicas are ready for Deployment platform-identity-provider
info: All 1 replicas are ready for Deployment platform-auth-service
info: All 1 replicas are ready for Deployment platform-identity-management
info: SCIM Users ID: {"req":{"method":"GET","url":"https://cp-test-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com/idmgmt/identity/api/v1/scim/users/uid=icpuser1,ou=people,dc=ibm,dc=com","headers":{"user-agent":"node-superagent/3.8.3","authorization":"Bearer 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","accept-language":"application/json"}},"header":{"vary":"Origin, Accept-Encoding","access-control-allow-credentials":"true","x-xss-protection":"1; mode=block","x-frame-options":"SAMEORIGIN","x-download-options":"noopen","x-content-type-options":"nosniff","x-dns-prefetch-control":"off","access-control-allow-origin":"*","content-security-policy":"default-src 'self'","content-type":"application/json; charset=utf-8","content-encoding":"gzip","date":"Fri, 04 Jul 2025 11:30:19 GMT","keep-alive":"timeout=5","transfer-encoding":"chunked","strict-transport-security":"max-age=31536000;includeSubDomains","set-cookie":["0d60fae7cb45cceb70ffb4f9f79f80ed=5f264ed01b369a1ea9016b0398bf250e; path=/; HttpOnly; Secure; SameSite=None"],"connection":"close"},"status":200,"text":"{\"schemas\":[\"urn:ietf:params:scim:schemas:core:2.0:User\",\"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User\",\"urn:ietf:params:scim:schemas:extension:ibmcp:2.0:User\",\"urn:ietf:params:scim:schemasibmcp:2.0:User\"],\"id\":\"uid=icpuser1,ou=people,dc=ibm,dc=com\",\"name\":{\"givenName\":\"Icpuser1\",\"familyName\":\"Icpuser1\",\"formatted\":\"Icpuser1 Icpuser1\"},\"emails\":[{\"value\":\"[email protected]\",\"type\":\"work\"}],\"groups\":[{\"display\":\"Icpgroup1\",\"value\":\"cn=icpgroup1,cn=platform,ou=cloud,ou=isl,ou=groups,dc=ibm,dc=com\",\"$ref\":\"https://cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com/idmgmt/identity/api/v1/scim/Groups/cn=icpgroup1,cn=platform,ou=cloud,ou=isl,ou=groups,dc=ibm,dc=com\"}],\"userName\":\"icpuser1\",\"externalId\":\"uid=icpuser1,ou=people,dc=ibm,dc=com\",\"displayName\":\"Icpuser1\",\"phoneNumbers\":[],\"meta\":{\"resourceType\":\"User\",\"location\":\"https://cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com/idmgmt/identity/api/v1/scim/Users/uid=icpuser1,ou=people,dc=ibm,dc=com\",\"created\":\"2024-07-15T08:50:30.618Z\",\"lastModified\":\"2024-07-15T08:50:30.618Z\"},\"urn:ietf:params:scim:schemas:extension:ibmcp:2.0:User\":{\"realmName\":\"SDS\"}}"}
{
  schemas: [
    'urn:ietf:params:scim:schemas:core:2.0:User',
    'urn:ietf:params:scim:schemas:extension:enterprise:2.0:User',
    'urn:ietf:params:scim:schemas:extension:ibmcp:2.0:User',
    'urn:ietf:params:scim:schemasibmcp:2.0:User'
  ],
  id: 'uid=icpuser1,ou=people,dc=ibm,dc=com',
  name: {
    givenName: 'Icpuser1',
    familyName: 'Icpuser1',
    formatted: 'Icpuser1 Icpuser1'
  },
  emails: [ { value: '[email protected]', type: 'work' } ],
  groups: [
    {
      display: 'Icpgroup1',
      value: 'cn=icpgroup1,cn=platform,ou=cloud,ou=isl,ou=groups,dc=ibm,dc=com',
      '$ref': 'https://cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com/idmgmt/identity/api/v1/scim/Groups/cn=icpgroup1,cn=platform,ou=cloud,ou=isl,ou=groups,dc=ibm,dc=com'
    }
  ],
  userName: 'icpuser1',
  externalId: 'uid=icpuser1,ou=people,dc=ibm,dc=com',
  displayName: 'Icpuser1',
  phoneNumbers: [],
  meta: {
    resourceType: 'User',
    location: 'https://cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com/idmgmt/identity/api/v1/scim/Users/uid=icpuser1,ou=people,dc=ibm,dc=com',
    created: '2024-07-15T08:50:30.618Z',
    lastModified: '2024-07-15T08:50:30.618Z'
  },
  'urn:ietf:params:scim:schemas:extension:ibmcp:2.0:User': { realmName: 'SDS' }
}
info: #####################################../
.    ✓ Positive:: SDS/TDS - GET Users by DN (2 secs)
info: Check deployment
info: Checking Deployment platform-auth-service to see if replicas are ready
info: Checking Deployment platform-identity-provider to see if replicas are ready
info: Checking Deployment platform-identity-management to see if replicas are ready
info: All 1 replicas are ready for Deployment platform-identity-management
info: All 1 replicas are ready for Deployment platform-auth-service
info: All 1 replicas are ready for Deployment platform-identity-provider
info: SCIM Users ID: {"req":{"method":"GET","url":"https://cp-test-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com/idmgmt/identity/api/v1/scim/users/uid=icpuser1,ou=people,dc=ibm,dc=com?attributes=userName%2CdisplayName","headers":{"user-agent":"node-superagent/3.8.3","authorization":"Bearer 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","accept-language":"application/json"}},"header":{"vary":"Origin, Accept-Encoding","access-control-allow-credentials":"true","x-xss-protection":"1; mode=block","x-frame-options":"SAMEORIGIN","x-download-options":"noopen","x-content-type-options":"nosniff","x-dns-prefetch-control":"off","access-control-allow-origin":"*","content-security-policy":"default-src 'self'","content-type":"application/json; charset=utf-8","content-length":"651","date":"Fri, 04 Jul 2025 11:30:21 GMT","keep-alive":"timeout=5","strict-transport-security":"max-age=31536000;includeSubDomains","set-cookie":["0d60fae7cb45cceb70ffb4f9f79f80ed=64e8df72546d19b3af3c90652445f9e6; path=/; HttpOnly; Secure; SameSite=None"],"connection":"close"},"status":200,"text":"{\"schemas\":[\"urn:ietf:params:scim:schemas:core:2.0:User\",\"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User\",\"urn:ietf:params:scim:schemas:extension:ibmcp:2.0:User\",\"urn:ietf:params:scim:schemasibmcp:2.0:User\"],\"id\":\"uid=icpuser1,ou=people,dc=ibm,dc=com\",\"userName\":\"icpuser1\",\"displayName\":\"Icpuser1\",\"meta\":{\"resourceType\":\"User\",\"location\":\"https://cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com/idmgmt/identity/api/v1/scim/Users/uid=icpuser1,ou=people,dc=ibm,dc=com\",\"created\":\"2024-07-15T08:50:30.618Z\",\"lastModified\":\"2024-07-15T08:50:30.618Z\"},\"urn:ietf:params:scim:schemas:extension:ibmcp:2.0:User\":{\"realmName\":\"SDS\"}}"}
{
  schemas: [
    'urn:ietf:params:scim:schemas:core:2.0:User',
    'urn:ietf:params:scim:schemas:extension:enterprise:2.0:User',
    'urn:ietf:params:scim:schemas:extension:ibmcp:2.0:User',
    'urn:ietf:params:scim:schemasibmcp:2.0:User'
  ],
  id: 'uid=icpuser1,ou=people,dc=ibm,dc=com',
  userName: 'icpuser1',
  displayName: 'Icpuser1',
  meta: {
    resourceType: 'User',
    location: 'https://cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com/idmgmt/identity/api/v1/scim/Users/uid=icpuser1,ou=people,dc=ibm,dc=com',
    created: '2024-07-15T08:50:30.618Z',
    lastModified: '2024-07-15T08:50:30.618Z'
  },
  'urn:ietf:params:scim:schemas:extension:ibmcp:2.0:User': { realmName: 'SDS' }
}
info: #####################################../
.    ✓ Positive:: SDS/TDS - GET Users by DN with attributes (2 secs)
info: Check deployment
info: Checking Deployment platform-auth-service to see if replicas are ready
info: Checking Deployment platform-identity-provider to see if replicas are ready
info: Checking Deployment platform-identity-management to see if replicas are ready
info: All 1 replicas are ready for Deployment platform-identity-provider
info: All 1 replicas are ready for Deployment platform-identity-management
info: All 1 replicas are ready for Deployment platform-auth-service
info: SCIM Users ID: {"req":{"method":"GET","url":"https://cp-test-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com/idmgmt/identity/api/v1/scim/users/uid=icpuser1,ou=people,dc=ibm,dc=com?attributes=userName%2CdisplayName%2Cgroups","headers":{"user-agent":"node-superagent/3.8.3","authorization":"Bearer 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","accept-language":"application/json"}},"header":{"vary":"Origin, Accept-Encoding","access-control-allow-credentials":"true","x-xss-protection":"1; mode=block","x-frame-options":"SAMEORIGIN","x-download-options":"noopen","x-content-type-options":"nosniff","x-dns-prefetch-control":"off","access-control-allow-origin":"*","content-security-policy":"default-src 'self'","content-type":"application/json; charset=utf-8","content-length":"940","date":"Fri, 04 Jul 2025 11:30:23 GMT","keep-alive":"timeout=5","strict-transport-security":"max-age=31536000;includeSubDomains","set-cookie":["0d60fae7cb45cceb70ffb4f9f79f80ed=64e8df72546d19b3af3c90652445f9e6; path=/; HttpOnly; Secure; SameSite=None"],"connection":"close"},"status":200,"text":"{\"schemas\":[\"urn:ietf:params:scim:schemas:core:2.0:User\",\"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User\",\"urn:ietf:params:scim:schemas:extension:ibmcp:2.0:User\",\"urn:ietf:params:scim:schemasibmcp:2.0:User\"],\"id\":\"uid=icpuser1,ou=people,dc=ibm,dc=com\",\"groups\":[{\"display\":\"Icpgroup1\",\"value\":\"cn=icpgroup1,cn=platform,ou=cloud,ou=isl,ou=groups,dc=ibm,dc=com\",\"$ref\":\"https://cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com/idmgmt/identity/api/v1/scim/Groups/cn=icpgroup1,cn=platform,ou=cloud,ou=isl,ou=groups,dc=ibm,dc=com\"}],\"userName\":\"icpuser1\",\"displayName\":\"Icpuser1\",\"meta\":{\"resourceType\":\"User\",\"location\":\"https://cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com/idmgmt/identity/api/v1/scim/Users/uid=icpuser1,ou=people,dc=ibm,dc=com\",\"created\":\"2024-07-15T08:50:30.618Z\",\"lastModified\":\"2024-07-15T08:50:30.618Z\"},\"urn:ietf:params:scim:schemas:extension:ibmcp:2.0:User\":{\"realmName\":\"SDS\"}}"}
{
  schemas: [
    'urn:ietf:params:scim:schemas:core:2.0:User',
    'urn:ietf:params:scim:schemas:extension:enterprise:2.0:User',
    'urn:ietf:params:scim:schemas:extension:ibmcp:2.0:User',
    'urn:ietf:params:scim:schemasibmcp:2.0:User'
  ],
  id: 'uid=icpuser1,ou=people,dc=ibm,dc=com',
  groups: [
    {
      display: 'Icpgroup1',
      value: 'cn=icpgroup1,cn=platform,ou=cloud,ou=isl,ou=groups,dc=ibm,dc=com',
      '$ref': 'https://cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com/idmgmt/identity/api/v1/scim/Groups/cn=icpgroup1,cn=platform,ou=cloud,ou=isl,ou=groups,dc=ibm,dc=com'
    }
  ],
  userName: 'icpuser1',
  displayName: 'Icpuser1',
  meta: {
    resourceType: 'User',
    location: 'https://cp-console-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com/idmgmt/identity/api/v1/scim/Users/uid=icpuser1,ou=people,dc=ibm,dc=com',
    created: '2024-07-15T08:50:30.618Z',
    lastModified: '2024-07-15T08:50:30.618Z'
  },
  'urn:ietf:params:scim:schemas:extension:ibmcp:2.0:User': { realmName: 'SDS' }
}
info: #####################################../
.    ✓ Positive:: SDS/TDS - GET Users by DN with groups attributes (2 secs)
info: Check deployment
info: Checking Deployment platform-auth-service to see if replicas are ready
info: Checking Deployment platform-identity-provider to see if replicas are ready
info: Checking Deployment platform-identity-management to see if replicas are ready
info: All 1 replicas are ready for Deployment platform-auth-service
info: All 1 replicas are ready for Deployment platform-identity-provider
info: All 1 replicas are ready for Deployment platform-identity-management
info: SCIM Users By Filter: {"req":{"method":"GET","url":"https://cp-test-ibm-common-services.apps.o1-909733.cp.fyre.ibm.com/idmgmt/identity/api/v1/scim/users?filter=displayName%20co%20%22icpuser1999%22","headers":{"user-agent":"node-superagent/3.8.3","authorization":"Bearer 7bb637f4cd27e17dcd7ba981c725da4aa5203cb08aaa4752d227f35c87d6a907a8453837cbd491235018edec6e71ad5cf469f72694e2b6ccfcc2cdcff576838911fe466b641063dc5dae05fa34b12e82884d6c54064c21456589c002dc444c2e68aade927e2d7ea3908f77756b416136f9873e6cef6877b828f95e5c959db98c68cfc8b9c0e6a476a2c8039ede8771cf7e620c304012a1d02d6dc4ac564a99f786f2a4bf11d4fb89213f560bf60f8658410a7f51ce80348a61f3f09ccf08f7daf9d02b973435f47df6a834c09438cbaee1a6f2b7ba39321c32e9285a418f229ad945d6ed5d23ee36c82781d936e29fb740e5437990a33d1b913bcdaea987e7aff456d3f6127b415a8031844f9298b9e3f35836505970d3b02a289bc4c4e5123bf409c266063c6007fe84dfc14b5a6ff040184707a4c56959dc3f76132861fa088024996d95adb5d372b38fa5c1afb2e3d21f74dd416d04bfc87a4f0e4618c8b4e8133e731a7d9227c6ad619794c4138a6f70b0d110fd3bad0172bc4781233c420099bc8e7e2d5b3f3daccbfddf82694bba3986b9ee6590ae5530a0f4c647780583d8da8adfbd484d5828329403260a2e2198139b45d87c429e0475deba51a4b271c3fcda12d3b0a57637b8a041874b11a113b723518aaa899eb50d80b056de46f56a47ba5966cdc74238c1e5221a6ebf1ae8fcaf4f3e1b013da5bab3089a7630","accept-language":"application/json"}},"header":{"vary":"Origin, Accept-Encoding","access-control-allow-credentials":"true","x-xss-protection":"1; mode=block","x-frame-options":"SAMEORIGIN","x-download-options":"noopen","x-content-type-options":"nosniff","x-dns-prefetch-control":"off","access-control-allow-origin":"*","content-security-policy":"default-src 'self'","content-type":"application/json; charset=utf-8","content-length":"222","date":"Fri, 04 Jul 2025 11:30:32 GMT","keep-alive":"timeout=5","strict-transport-security":"max-age=31536000;includeSubDomains","set-cookie":["0d60fae7cb45cceb70ffb4f9f79f80ed=64e8df72546d19b3af3c90652445f9e6; path=/; HttpOnly; Secure; SameSite=None"],"connection":"close"},"status":200,"text":"{\"schemas\":[\"urn:ietf:params:scim:api:messages:2.0:ListResponse\"],\"totalResults\":1,\"Resources\":[{\"id\":\"uid=icpuser1999,ou=people,dc=ibm,dc=com\",\"urn:ietf:params:scim:schemas:extension:ibmcp:2.0:User\":{\"realmName\":\"SDS\"}}]}"}
{
  schemas: [ 'urn:ietf:params:scim:api:messages:2.0:ListResponse' ],
  totalResults: 1,
  Resources: [
    {
      id: 'uid=icpuser1999,ou=people,dc=ibm,dc=com',
      'urn:ietf:params:scim:schemas:extension:ibmcp:2.0:User': [Object]
    }
  ]
}
info: #####################################../
.    ✓ Positive:: SDS/TDS - GET Users by filter - co operator (2 secs)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@rwhundley rwhundley Awaiting requested review from rwhundley

@Tirumalavasa Tirumalavasa Awaiting requested review from Tirumalavasa

At least 1 approving review is required to merge this pull request.

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@Raniprathyusha @ibm-ci-bot @YangShyrMei