2026-10-06T06:54:45Z TRC kyverno/pkg/version/version.go:49 > version hash=--- logger=setup/version v=2 version=1.26.7
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > add_dir_header=false logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > admissionReports=false logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > allowHTTPInNamespacedPolicies= logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > allowInsecureRegistry=false logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > allowedResults=pass,fail,error,warn,skip logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderr=false logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderrthreshold=0 logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > apiCallTimeout=30s logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitEnabled=true logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitRatio=0.9 logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > autoUpdateWebhooks=true logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > backgroundServiceAccountName=system:serviceaccount:konflux-kyverno:kyverno-background-controller logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > caSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-ca logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerHost= logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerPort=9443 logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitBurst=200 logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitQPS=100 logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > controllerRuntimeMetricsAddress=:8080 logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > crdWatcher=false logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > disableCertManagerController=false logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > disableLogColor=false logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > disableMetrics=false logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > dumpPatches= logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > dumpPayload=false logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > enableConfigMapCaching=true logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > enableCosignLogging=false logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > enableDeferredLoading= logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > enablePolicyException=false logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > enableReporting= logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > enableTracing=false logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > enableTuf=false logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitBurst=2000 logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitQPS=1000 logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > exceptionNamespace= logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > excludeBootstrapResources=false logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > exemplarFilter=trace-based logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > forceFailurePolicyIgnore= logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > generateMutatingAdmissionPolicy= logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > generateValidatingAdmissionPolicy= logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > httpAllowlist= logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > httpBlocklist= logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > imagePullSecrets= logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheEnabled=true logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheMaxSize=1000 logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheTTLDuration=1h0m0s logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > kubeconfig= logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > leaderElectionRetryPeriod=26s logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > legacy_stderr_threshold_behavior=true logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > log_backtrace_at=:0 logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > log_dir= logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > log_file= logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > log_file_max_size=1800 logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingFormat=text v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingtsFormat=default v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag logtostderr=true v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAPICallResponseLength=2000000 v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAdmissionReports=1000 v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditCapacity=1000 v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditWorkers=8 v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxGlobalContextEntries=0 v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxQueuedEvents=1000 v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsCASecretName= v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsHost= v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsKeyAlgorithm=RSA v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsPort=8000 v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsRenewBefore=360h0m0s v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsServerIP= v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsTLSSecretName= v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag omitEvents=PolicyApplied,PolicySkipped v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag one_output=false v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelCollector=opentelemetrycollector.kyverno.svc.cluster.local v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelConfig=prometheus v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profile=false v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profileAddress= v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profilePort=6060 v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag protectManagedResources= v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag registryCredentialHelpers=default,google,amazon,azure,github v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag renewBefore=360h0m0s v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag reportsServiceAccountName= v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag resyncPeriod=15m0s v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag serverIP= v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag servicePort=443 v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_headers=false v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_log_headers=false v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag stderrthreshold=2 v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsKeyAlgorithm=RSA v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-pair v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingAddress= v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingCreds= v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingPort=4317 v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag transportCreds= v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufMirror=https://tuf-repo-cdn.sigstore.dev v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRoot= v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRootRaw= v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 vmodule=
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookRegistrationTimeout=2m0s
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerHost=
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerPort=9443
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookTimeout=10
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/maxprocs.go:12 > setup maxprocs... logger=setup/maxprocs v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/memlimit.go:13 > setup memlimit... logger=setup/memlimit ratio=0.9 v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/signal.go:16 > setup signals... logger=setup/signals v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-10-06T06:54:45Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=UnlockWhileProcessingFIFO logger=klog v=1
2026-10-06T06:54:45Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowCARotation logger=klog v=1
2026-10-06T06:54:45Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsPreferCBOR logger=klog v=1
2026-10-06T06:54:45Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=AtomicFIFO logger=klog v=1
2026-10-06T06:54:45Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsAllowCBOR logger=klog v=1
2026-10-06T06:54:45Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformers logger=klog v=1
2026-10-06T06:54:45Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=WatchListClient logger=klog v=1
2026-10-06T06:54:45Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowTLSCacheGC logger=klog v=1
2026-10-06T06:54:45Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformersBatchProcess logger=klog v=1
2026-10-06T06:54:45Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InformerResourceVersion logger=klog v=1
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/configmap.go:36 > create metrics-config-controller... logger=setup/metrics-config-controller v=2
2026-10-06T06:54:45Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/configmap.go:52 > done creating metrics-config-controller logger=setup/metrics-config-controller v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/metrics.go:27 > setup metrics... collector=opentelemetrycollector.kyverno.svc.cluster.local creds= exemplarFilter=trace-based logger=setup/metrics otel=prometheus port=8000 tlsSecretName= v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/configmap.go:15 > create config-controller... logger=setup/config-controller v=2
2026-10-06T06:54:45Z INF kyverno/cmd/internal/metrics.go:159 > Starting HTTP metrics server address=[]:8000 logger=setup/metrics v=0
2026-10-06T06:54:45Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-06T06:54:45Z TRC kyverno/pkg/config/config.go:433 > defaultRegistry configured defaultRegistry=docker.io logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-06T06:54:45Z TRC kyverno/pkg/config/config.go:449 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-06T06:54:45Z TRC kyverno/pkg/config/config.go:458 > excludedGroups configured excludeGroups=["system:nodes"] includeGroups=[] logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-06T06:54:45Z TRC kyverno/pkg/config/config.go:463 > excludeUsernames not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-06T06:54:45Z TRC kyverno/pkg/config/config.go:471 > excludeRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-06T06:54:45Z TRC kyverno/pkg/config/config.go:479 > excludeClusterRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-06T06:54:45Z TRC kyverno/pkg/config/config.go:495 > generateSuccessEvents configured generateSuccessEvents=false logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-06T06:54:45Z TRC kyverno/pkg/config/config.go:501 > successEventActions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-06T06:54:45Z TRC kyverno/pkg/config/config.go:525 > webhooks configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhooks="{\"namespaceSelector\":{\"matchExpressions\":[{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"kube-system\"]},{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"konflux-kyverno\"]}],\"matchLabels\":null}}"
2026-10-06T06:54:45Z TRC kyverno/pkg/config/config.go:539 > webhookAnnotations configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhookAnnotations="{\"admissions.enforcer/disabled\":\"true\"}"
2026-10-06T06:54:45Z TRC kyverno/pkg/config/config.go:545 > webhookLabels not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-06T06:54:45Z TRC kyverno/pkg/config/config.go:559 > matchConditions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-06T06:54:45Z TRC kyverno/pkg/config/config.go:580 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-06T06:54:45Z TRC kyverno/pkg/config/config.go:595 > maxContextSize not set, using default default=2097152 logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/configmap.go:31 > done creating config-controller logger=setup/config-controller v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/registry.go:18 > setup registry client... insecure=false logger=setup/registry-client secrets= v=2
2026-10-06T06:54:45Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/imageverifycache.go:10 > setup image verify cache... enabled=true logger=setup/image-verify-cache maxsize=1000 ttl=1h0m0s v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/client.go:60 > create kyverno client... burst=200 kubeconfig= logger=setup/kyverno-client qps=100 v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/client.go:68 > create dynamic client... burst=200 kubeconfig= logger=setup/dynamic-client qps=100 v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/client.go:84 > create apiserver client... burst=200 kubeconfig= logger=setup/apiserver-client qps=100 v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/client.go:76 > create metadata client... burst=200 kubeconfig= logger=setup/metadata-client qps=100 v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/client.go:92 > create the kyverno dynamic client... burst=200 kubeconfig= logger=setup/d-client qps=100 v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/client.go:100 > create the events client... burst=200 kubeconfig= logger=setup/events-client qps=100 v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/events-client/kube-client qps=100 v=2
2026-10-06T06:54:45Z TRC kyverno/cmd/internal/reporting.go:13 > setting up reporting... enableReporting= generate=false imageVerify=false logger=setup/setup-reporting mutate=false mutateExisiting=false v=2 validate=false
2026-10-06T06:54:45Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-10-06T06:54:45Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-06T06:54:45Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-06T06:54:46Z TRC kyverno/cmd/internal/engine.go:62 > setup exception selector... enablePolicyException=false exceptionNamespace= logger=setup/exception-selector v=2
2026-10-06T06:54:46Z TRC kyverno/cmd/internal/engine.go:91 > setup config map resolver... enableConfigMapCaching=true logger=setup/configmap-resolver v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-06T06:54:46Z TRC kyverno/cmd/internal/engine.go:44 > setup engine... logger=setup/engine v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Policy v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.UpdateRequest v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2beta1.GlobalContextEntry v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterPolicy v=2
2026-10-06T06:54:46Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:208 > Starting metrics server logger=controller-runtime/metrics v=0
2026-10-06T06:54:46Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:247 > Serving metrics server bindAddress=:8080 logger=controller-runtime/metrics secure=false v=0
2026-10-06T06:54:46Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy source="kind source: *v1beta1.NamespacedMutatingPolicy" v=0
2026-10-06T06:54:46Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy source="kind source: *v1beta1.NamespacedValidatingPolicy" v=0
2026-10-06T06:54:46Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy source="kind source: *v1beta1.MutatingPolicy" v=0
2026-10-06T06:54:46Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy source="kind source: *v1beta1.ValidatingPolicy" v=0
2026-10-06T06:54:46Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy source="kind source: *v1beta1.NamespacedImageValidatingPolicy" v=0
2026-10-06T06:54:46Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy source="kind source: *v1beta1.ImageValidatingPolicy" v=0
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedGeneratingPolicy v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Namespace v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRoleBinding v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.GeneratingPolicy v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.RoleBinding v=2
2026-10-06T06:54:46Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:258 > Attempting to acquire leader lease... lock=konflux-kyverno/kyverno logger=klog v=0
2026-10-06T06:54:46Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=kyverno-events v=2 workers=3
2026-10-06T06:54:46Z TRC kyverno/pkg/event/controller.go:125 > start logger=EventGenerator v=2
2026-10-06T06:54:46Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=global-context v=2 workers=1
2026-10-06T06:54:46Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/controllers name=policycache-controller v=2 workers=3
2026-10-06T06:54:46Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:272 > Successfully acquired lease lock=konflux-kyverno/kyverno logger=klog v=0
2026-10-06T06:54:46Z TRC kyverno/pkg/leaderelection/leaderelection.go:82 > started leading id=kyverno-admission-controller-c44dccd8c-l4f9k logger=setup/leader-election v=2
2026-10-06T06:54:46Z TRC kyverno/cmd/kyverno/main.go:335 > MutatingAdmissionPolicy API is not registered, skipping MAP informers error="mutating admission policy API is not registered" v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicyBinding v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Lease v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicy v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingWebhookConfiguration v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.PolicyException v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.MutatingWebhookConfiguration v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRole v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.PolicyException v=2
2026-10-06T06:54:46Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-10-06T06:54:47Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-10-06T06:54:47Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-10-06T06:54:47Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-10-06T06:54:47Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-10-06T06:54:47Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-10-06T06:54:47Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0
2026-10-06T06:54:47Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0
2026-10-06T06:54:47Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0 worker count=1
2026-10-06T06:54:47Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0
2026-10-06T06:54:47Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0 worker count=1
2026-10-06T06:54:47Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0 worker count=1
2026-10-06T06:54:47Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0
2026-10-06T06:54:47Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0 worker count=1
2026-10-06T06:54:47Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=admissionpolicy-generator v=2 workers=2
2026-10-06T06:54:47Z TRC kyverno/pkg/utils/controller/run.go:20 > starting ... logger=admissionpolicy-generator v=2
2026-10-06T06:54:47Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=exception-webhook-controller v=2 workers=1
2026-10-06T06:54:47Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=certmanager-controller v=2 workers=1
2026-10-06T06:54:47Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=global-context-webhook-controller v=2 workers=1
2026-10-06T06:54:47Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=webhook-controller v=2 workers=2
2026-10-06T06:54:47Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=celexception-webhook-controller v=2 workers=1
2026-10-06T06:54:47Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=status-controller v=2 workers=3
2026-10-06T06:54:47Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-06T06:54:47Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-06T06:54:47Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-06T06:54:47Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-06T06:54:47Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0
2026-10-06T06:54:47Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0 worker count=1
2026-10-06T06:54:47Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0
2026-10-06T06:54:47Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0 worker count=1
2026-10-06T06:59:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=CREATE uid=4804dd72-9fef-4e4d-82b8-49067c41a8e9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-kubearchiveconfig type=ClusterPolicy v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-kubearchiveconfig uid=1a44fda5-3eeb-4e4d-8b1a-6b48bd66829e v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=CREATE uid=cdaffed6-a47f-481b-bbc2-290db4556667 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace uid=05f2d1e8-c2da-46fd-a68e-e0ca690aa77c v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace type=ClusterPolicy v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=CREATE uid=f0446c9a-9d5e-4ff5-baa3-f80d7c61c31a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=CREATE uid=e0277ef8-5a1d-4955-8e2f-2bd9b0425bd8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=CREATE uid=44573f13-d591-4e9c-8b7e-085dcbb9bc55 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-rbcm uid=1014b525-50a0-4fd0-a570-a0507bfe2e99 v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-rbcm type=ClusterPolicy v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=CREATE uid=a7dd7bfa-a572-4625-a7c9-627f892c908b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=CREATE uid=cbfc130b-5e3a-45af-bd73-23b0f8b9aad1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=CREATE uid=adfa7848-0f5d-4f97-9a0a-12ffaa03d44b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring type=ClusterPolicy v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring uid=e89d7f1e-1a65-43c4-b0ef-8b9f7213e32e v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole type=ClusterPolicy v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress type=ClusterPolicy v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole uid=610abaa1-fc05-48d4-9f0c-97a35e6ab4f8 v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress uid=d21182cd-ca5a-43b9-8e80-dd6b2dad1d15 v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-olm type=ClusterPolicy v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-olm uid=9a99c036-3d1e-4369-85e6-04efa8575e47 v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=62c5e3ae-381b-461c-956c-ea332d5713af user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-generate-konflux-viewer-access type=ClusterPolicy v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-generate-konflux-viewer-access uid=648d774b-f255-4a9c-9f9d-4cfd5cfd7103 v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=CREATE uid=a8c19d99-5317-4ca0-9191-c075772eef61 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-integration uid=dbc53a99-2e7f-4632-93fb-c6beb1a96581 v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-integration type=ClusterPolicy v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=CREATE uid=448fc37a-4bfd-44c1-a12a-6f6442738859 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=817a8ae6-03f3-4f07-8cda-a5f1cffb22a1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-sysauth-releng type=ClusterPolicy v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-sysauth-releng uid=fa73b3cc-2e9d-4ae6-89af-7a2572fbbf2b v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=CREATE uid=51645df5-92e9-463c-80fa-59c2575950e9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-system-authenticated type=ClusterPolicy v=2
2026-10-06T06:59:38Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-system-authenticated uid=7346b748-4f64-4b5b-8958-53a3a230f954 v=2
2026-10-06T06:59:38Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-sysauth-releng\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-sysauth-releng status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-06T06:59:38Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-system-authenticated\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-system-authenticated status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-06T06:59:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=CREATE uid=c48b26b5-bee0-4191-9cdd-551859bd4f55 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=CREATE uid=424db0b4-00fd-477a-9ae4-4737026d3ed0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=CREATE uid=974aaaa5-7c1b-4a9a-8bc8-ce2c58805b7b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=tekton-taskrun-resource-policy type=ClusterPolicy v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=tekton-taskrun-resource-policy uid=ddb4af3f-fee5-44c3-afcf-58476d3b910b v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=15a1698a-c14f-4bc8-b2af-2e38bfc3ba46 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-binding-system-groups type=ClusterPolicy v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-binding-system-groups uid=c950666c-2fa8-4933-ac35-7e0613d616ce v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-docker-io-images type=ClusterPolicy v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-docker-io-images uid=444b2c57-fcef-41e5-9bb1-7d767c29e7df v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=2af33c53-f75b-4b08-a134-2232efb576f4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:39Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-binding-system-groups\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-binding-system-groups status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-06T06:59:39Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-docker-io-images\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-docker-io-images status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-06T06:59:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=6e6914f6-2816-493f-8fde-dec9e0719711 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=fe2c25ea-e1ac-45dd-921b-c3a363c9e5b3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=453a9adf-8a54-4a86-b54c-4d8994af0c81 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=22366000-7c93-49ef-8d58-8122bc188702 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=56d05a26-f54f-4732-bbb3-cf45b61e931e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=f5bda9b3-9e9a-424a-971c-80ead44b6127 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=472fee90-03c0-4db5-8585-1c1952fe9603 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=8f8ed906-a9a6-4188-b416-6e9d9b9bccf9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=c1c82557-dcd3-45d4-8c4d-09c6ff00dd3d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=create-minio-bucket namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Job/create-minio-bucket resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=ffa11ead-bc57-463d-b1de-65100de79374 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=tekton-chains-signing-secret namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Job/tekton-chains-signing-secret resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=22785890-bf7b-4fee-9af0-91ca43b057be user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=942c3b4c-2be1-427f-be05-1a03375e46fa user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=create-minio-bucket-wzlsf namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/create-minio-bucket-wzlsf resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=737c70fc-8260-4462-8b10-851509f62e78 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b9778876-e85a-4380-aa6b-87ee35f745b5"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"42fa5c70-1242-4a38-ad91-149860c0c486","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-chains-signing-secret-hn4l7 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-chains-signing-secret-hn4l7 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=26999743-ca19-40d7-8a03-02d804176b41 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b9778876-e85a-4380-aa6b-87ee35f745b5"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"42fa5c70-1242-4a38-ad91-149860c0c486","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=da046029-b971-420b-b82a-c145b0202c65 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=f8e19bd3-be5a-42c0-b4c6-c4f2311be054 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=226986e2-0d95-4736-a4fe-08fd8fbd515c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=f27b4bba-9bb2-4422-ba08-d97a055edcfd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=196df8ec-4287-4fb5-842d-347a18f2ef65 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=4ca6df72-d57f-431d-8d57-c621537a8f5b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=ba94210c-042c-4089-8b4a-92a466fe8ec7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=afc65f62-b4a3-4aa9-906a-daf3f57247d1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=c58be5b8-6465-493f-9dee-e9aebb80963e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=7b04f20c-c9f7-4389-bb3c-dd1d46fbca29 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=22f896d1-cd87-4fd8-97f0-c799affaad34 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=a3661c01-63c0-4926-8fc2-d76d46f50104 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=758c93c3-6bd5-46b1-8f6f-d87a715bf956 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=c5a56566-c6fa-46d7-a90c-946610a0a1bc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=88fb9c74-9466-4ef0-a812-64f0a3c55d6c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=731188d6-0b9a-46af-901b-24d6bb79536d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=f355284f-000f-4f61-b49b-b3cdc7718d35 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=f375a996-c3ac-49a1-9c09-94a778e773c4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=65d28265-471c-4198-82d9-84e0b2e3fad5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=3300f5ae-d0b8-4b3b-adc0-dd325d78213a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=fcf25820-4ca2-46f7-a078-90950f857094 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=ce02c7cd-0224-4b15-99f0-fdfb686df5ec user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=6567a00d-5543-4231-bd69-75b9d90e80d1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=a4e14578-72dd-41b0-9a94-c61cbd86ad2e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=7ceb7a14-f4c3-477b-8212-3351772c8f91 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=6a5e9ef2-903d-42ba-a18e-f4407f3b91b3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=164601dc-fed8-4661-8530-509e1551680d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=7c51b014-bad0-4b8f-a7d8-5ce9a1439cae user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=6a703b71-735d-43d7-b03e-fff3ae730218 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=CREATE uid=be025566-b0c9-4e2a-8738-fa44e3f6d440 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:42Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=bootstrap-tenant-namespace-queue uid=dccdc880-401a-4f75-ab47-8067cde0c301 v=2
2026-10-06T06:59:42Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=bootstrap-tenant-namespace-queue type=ClusterPolicy v=2
2026-10-06T06:59:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=2224b27f-352c-4f47-83c0-3cd99302f638 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=a2cb3e9e-0503-492d-b4af-f1cacb96dc8a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=6e1d4347-461c-4012-9cee-1bfe6a8e9d1a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=9f626ae3-b276-413a-911e-740ad4a634d4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=a5b795cc-a34e-404e-8a01-a86728781195 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=7ee49c23-b528-49df-9fcc-5e58aa735444 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=f213e3ef-d558-4cf3-8f56-94d0092d733f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=baec84c7-d58a-414f-ad78-b2b55ad97d37 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=075d3ba1-fa4a-43ca-b6fd-ece17857ae7e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=debeecfa-b2fb-46fd-9205-a21442d89cf1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=9a1f9c0a-8a6f-42d4-93c6-a7e91b3d21b0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=30893fcd-15a0-4172-b670-9253a06aa64e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=57af70ce-7f33-4b88-943f-04d1abaa26ba user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=be9e7de9-14ba-4516-ab45-d2fa9786344e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=83fc8795-eaa5-4a3d-8ebb-743740e4a90c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=79dda54f-a8b7-4d1c-b060-3e825c1fa842 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=a38a3237-eac6-4a25-b949-65bfa92cc74f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=afb0711e-a8b6-4c47-89ac-32d9bd73d398 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=1181bd7f-6ef4-4ac6-982c-8c3ac85069d1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=9e2d9088-fa09-441a-8e12-436bdab1fa47 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=6cc42321-e575-4c9f-9ce8-8b6a11f54e1a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=392d5312-cc80-4e12-8e64-af1b3c4fec42 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=56184dae-0b1c-402c-9008-40487d08fcaa user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=a016ff45-46d2-441a-abe4-2cd8dc7e5d1c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=177f7e79-c80d-4b8e-8f85-c21dc1702774 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=c7f3ecf3-d1fa-43c8-8dac-a95e96ba20f4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T06:59:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=72a88489-b29f-4a06-8ba0-b3acd7ec8a0a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:00:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29854500 namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Job/osd-delete-backplane-serviceaccounts-29854500 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=5ae06a6c-7b95-435d-85c2-469a2a6e6eb1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ab1a6406-02df-4c04-865b-17a1f38ab124"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"2232c5f9-7b93-4998-850d-251618be7241","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-06T07:00:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29854500 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29854500 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=9e166221-f75e-465b-b10d-815f6c470752 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ab1a6406-02df-4c04-865b-17a1f38ab124"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"2232c5f9-7b93-4998-850d-251618be7241","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-06T07:00:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29854500-ln8tc namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Pod/osd-delete-backplane-serviceaccounts-29854500-ln8tc resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=4a8b6226-07e0-4788-915d-8b0e162ec5e4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b9778876-e85a-4380-aa6b-87ee35f745b5"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"42fa5c70-1242-4a38-ad91-149860c0c486","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-06T07:00:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29854500-ck2ph namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29854500-ck2ph resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=f712d1a5-0ffc-4d0f-8a65-a785e3c14468 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b9778876-e85a-4380-aa6b-87ee35f745b5"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"42fa5c70-1242-4a38-ad91-149860c0c486","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-06T07:02:34Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="apps/v1, Kind=StatefulSet" gvr="apps/v1, Resource=statefulsets" kind=StatefulSet logger=webhooks/resource/validate name=affinity-assistant-98333a6ac4 namespace=chains-e2e-tgxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-tgxv/StatefulSet/affinity-assistant-98333a6ac4 resource.gvk="apps/v1, Kind=StatefulSet" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=64cf1dd1-b31f-4385-8c0c-79ac6ef7d9a6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3bcfd734-67f5-4a48-9a22-873a3a6fab56"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["07163f03-e118-427e-a1cc-48813eaa8e7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:02:34Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:statefulset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=affinity-assistant-98333a6ac4-0 namespace=chains-e2e-tgxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-tgxv/Pod/affinity-assistant-98333a6ac4-0 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=ec228bd6-de5b-4910-b146-8b753146b74c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ecbb9fda-4978-438b-8f5d-9b6b2615351b"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"a034ea22-5f24-4c47-882c-332a009c93b8","username":"system:serviceaccount:kube-system:statefulset-controller"} v=2
2026-10-06T07:02:35Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-ljbjiitcvp-init-pod namespace=chains-e2e-tgxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-tgxv/Pod/buildah-demo-ljbjiitcvp-init-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=12893a3d-b045-4743-807e-3a53271a8598 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3bcfd734-67f5-4a48-9a22-873a3a6fab56"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["07163f03-e118-427e-a1cc-48813eaa8e7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:02:50Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-ljbjiitcvp-clone-repository-pod namespace=chains-e2e-tgxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-tgxv/Pod/buildah-demo-ljbjiitcvp-clone-repository-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=93c19ae7-bd94-4254-8d20-7c0239c84cc9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7ba344a-7fec-41dc-8faa-423419e23ed3"],"authentication.kubernetes.io/node-name":["ip-10-0-135-222.ec2.internal"],"authentication.kubernetes.io/node-uid":["d0225266-0c0c-4864-97a3-02a25cf4d1fd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["31eb186e-8868-4625-a1a5-71f670450953"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:03:03Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-fwnp4 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-fwnp4 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=4d351a3d-9025-46c0-b7ad-7026b70f27d3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3fba54f-490e-4729-86d9-0f11bbc07662"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"d6de4bc7-45b6-40dc-a0dd-4efe42f8837c","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-06T07:03:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=b5144a7b-a356-4a04-84dd-ea19182a4fed user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:03:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=df955a98-5734-4686-8df8-d948f651556a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:03:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=c7f7cbd9-a199-490a-a79b-27ad510f4ad2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:03:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=18ad8493-9290-48df-8981-cba8ccd9fa45 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:03:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=774f3bf7-4ebb-4613-b1a0-ca2a479e3a24 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:03:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=437a9f78-4260-4a02-8a40-b856e7bf86a5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:03:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=6288427f-d8d1-4093-b8a7-89311d34cbe2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:03:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=d5bc46e6-c10a-4eb8-98ea-fcc64612fe63 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:03:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=a11275e8-c198-4f31-8741-cfd08631ff31 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:03:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=7bc59973-cdf5-4e5d-8075-8c709261d0c1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:03:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=5825a7a9-69e5-4a1c-88cd-adfd8868e7e4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:03:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=11e8f236-4b5f-4ed9-8791-ecc143df4a6a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:03:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=4ec61ad6-b116-49f5-9745-9984af2acfe0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:03:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=68e0a2e3-e751-4097-8dd2-b37484595152 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:03:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=1b7e208d-1dd5-432a-8271-52c9c1ea0ff0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:03:11Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-ljbjiitcvp-prefetch-dependencies-pod namespace=chains-e2e-tgxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=88dab969-28e2-4307-be65-57bf563d23bb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7ba344a-7fec-41dc-8faa-423419e23ed3"],"authentication.kubernetes.io/node-name":["ip-10-0-135-222.ec2.internal"],"authentication.kubernetes.io/node-uid":["d0225266-0c0c-4864-97a3-02a25cf4d1fd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["31eb186e-8868-4625-a1a5-71f670450953"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:03:11Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-ljbjiitcvp-prefetch-dependencies-pod namespace=chains-e2e-tgxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=88cb04c4-3ff6-401f-bd3f-5d5c58ec82a7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7ba344a-7fec-41dc-8faa-423419e23ed3"],"authentication.kubernetes.io/node-name":["ip-10-0-135-222.ec2.internal"],"authentication.kubernetes.io/node-uid":["d0225266-0c0c-4864-97a3-02a25cf4d1fd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["31eb186e-8868-4625-a1a5-71f670450953"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:03:11Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-ljbjiitcvp-prefetch-dependencies-pod namespace=chains-e2e-tgxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-tgxv/Pod/buildah-demo-ljbjiitcvp-prefetch-dependencies-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=74d66fff-f5fd-4dfb-baed-21314f474129 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7ba344a-7fec-41dc-8faa-423419e23ed3"],"authentication.kubernetes.io/node-name":["ip-10-0-135-222.ec2.internal"],"authentication.kubernetes.io/node-uid":["d0225266-0c0c-4864-97a3-02a25cf4d1fd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["31eb186e-8868-4625-a1a5-71f670450953"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:03:27Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-ljbjiitcvp-build-container-pod namespace=chains-e2e-tgxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-tgxv/Pod/buildah-demo-ljbjiitcvp-build-container-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=c1719a14-6460-48fa-aba5-49091ac4184e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3bcfd734-67f5-4a48-9a22-873a3a6fab56"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["07163f03-e118-427e-a1cc-48813eaa8e7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:04:19Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-k76z8 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-k76z8 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=9492f970-52ca-40ba-9158-f8e36fe91b29 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3fba54f-490e-4729-86d9-0f11bbc07662"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"d6de4bc7-45b6-40dc-a0dd-4efe42f8837c","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-06T07:05:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29854505 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29854505 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=69c6570b-f37f-4ce5-8942-4a6936a618ef user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ab1a6406-02df-4c04-865b-17a1f38ab124"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"2232c5f9-7b93-4998-850d-251618be7241","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-06T07:05:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29854505-wgmb8 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29854505-wgmb8 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=ebb340a8-f0fc-4d7c-b081-793abd73c361 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b9778876-e85a-4380-aa6b-87ee35f745b5"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"42fa5c70-1242-4a38-ad91-149860c0c486","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-06T07:05:37Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-ljbjiitcvp-build-image-index-pod namespace=chains-e2e-tgxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-tgxv/Pod/buildah-demo-ljbjiitcvp-build-image-index-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=4877a920-1eca-4b8a-a7a6-94792dec1985 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3bcfd734-67f5-4a48-9a22-873a3a6fab56"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["07163f03-e118-427e-a1cc-48813eaa8e7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:06:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=dc66d5fc-ee23-4ee3-85e3-77d075b2db31 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:06:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=277fe812-ad6c-407f-9e7c-cf4f0891af5a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:06:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=76cd5aff-c1b0-4857-807d-b62f73d2b6a7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:06:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=50bcf431-fa93-48be-82fc-096abb4fb650 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:06:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=b13e43a3-7d7a-4771-b8d1-905c5b4722e1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:06:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=b4e447e4-d3bb-476e-82be-d39484609377 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:06:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=335e50da-252b-4cb2-8b88-a419d7be1055 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:06:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=ebbcd0c2-0138-4eb1-abba-b95da0bccbc6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:06:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=8d5cf3d1-40b4-49d0-a12d-e06d8a9f29c2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:06:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=1f7108b2-1bf7-473f-8399-04d99ea0a0f8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:06:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=aef25978-24e3-4477-98a5-1b9fe1e38793 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:06:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=fe9258ad-fb70-442a-a3e0-51532cdf96b0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:06:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=b286c1c2-c983-4aab-a066-1bc229d5c1ca user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:06:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=346aad86-638e-40ca-b6b7-3cad02b7c2e5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:06:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=271c0137-3fb2-4421-b917-70fbf114090a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:06:24Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-ljbjiitcvp-push-dockerfile-pod namespace=chains-e2e-tgxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-tgxv/Pod/buildah-demo-ljbjiitcvp-push-dockerfile-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=6ca64571-3246-45d8-8dc1-69a123a8022e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3bcfd734-67f5-4a48-9a22-873a3a6fab56"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["07163f03-e118-427e-a1cc-48813eaa8e7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:06:24Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-ljbjiitcvp-apply-tags-pod namespace=chains-e2e-tgxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-tgxv/Pod/buildah-demo-ljbjiitcvp-apply-tags-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=3cc18a10-8ce1-49e2-b3c6-066c87530d17 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7ba344a-7fec-41dc-8faa-423419e23ed3"],"authentication.kubernetes.io/node-name":["ip-10-0-135-222.ec2.internal"],"authentication.kubernetes.io/node-uid":["d0225266-0c0c-4864-97a3-02a25cf4d1fd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["31eb186e-8868-4625-a1a5-71f670450953"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:06:35Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-b4858bea9c9fbf21d062e728df81d0e8-pod namespace=chains-e2e-tgxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=915b090a-530f-480c-9795-69a0f70135ed user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3bcfd734-67f5-4a48-9a22-873a3a6fab56"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["07163f03-e118-427e-a1cc-48813eaa8e7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:06:35Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-b4858bea9c9fbf21d062e728df81d0e8-pod namespace=chains-e2e-tgxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=44be3755-b76e-44f7-ac2f-1948bfbacc5d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3bcfd734-67f5-4a48-9a22-873a3a6fab56"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["07163f03-e118-427e-a1cc-48813eaa8e7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:06:35Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-b4858bea9c9fbf21d062e728df81d0e8-pod namespace=chains-e2e-tgxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-tgxv/Pod/verify-enterprise-contract-b4858bea9c9fbf21d062e728df81d0e8-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=4a03c8b4-67d4-482e-9016-09073cd82881 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3bcfd734-67f5-4a48-9a22-873a3a6fab56"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["07163f03-e118-427e-a1cc-48813eaa8e7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:06:59Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-f22f6cb74953fda2d9e32d6bec5765e6-pod namespace=chains-e2e-tgxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=366a1c52-cbd3-4e2c-a39f-196c7adae149 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7ba344a-7fec-41dc-8faa-423419e23ed3"],"authentication.kubernetes.io/node-name":["ip-10-0-135-222.ec2.internal"],"authentication.kubernetes.io/node-uid":["d0225266-0c0c-4864-97a3-02a25cf4d1fd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["31eb186e-8868-4625-a1a5-71f670450953"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:06:59Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-f22f6cb74953fda2d9e32d6bec5765e6-pod namespace=chains-e2e-tgxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=03b6af98-4faf-44f4-a1c5-26e5b3c0624a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7ba344a-7fec-41dc-8faa-423419e23ed3"],"authentication.kubernetes.io/node-name":["ip-10-0-135-222.ec2.internal"],"authentication.kubernetes.io/node-uid":["d0225266-0c0c-4864-97a3-02a25cf4d1fd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["31eb186e-8868-4625-a1a5-71f670450953"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:06:59Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-f22f6cb74953fda2d9e32d6bec5765e6-pod namespace=chains-e2e-tgxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-tgxv/Pod/verify-enterprise-contract-f22f6cb74953fda2d9e32d6bec5765e6-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=bbf34a22-1c49-4aa1-b28a-1da564a6f6d4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7ba344a-7fec-41dc-8faa-423419e23ed3"],"authentication.kubernetes.io/node-name":["ip-10-0-135-222.ec2.internal"],"authentication.kubernetes.io/node-uid":["d0225266-0c0c-4864-97a3-02a25cf4d1fd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["31eb186e-8868-4625-a1a5-71f670450953"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:07:13Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-d091be9d405c6dcb524719d7d8dffaa4-pod namespace=chains-e2e-tgxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=706c68aa-fd19-43f5-9dad-2d87a8fc143b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3bcfd734-67f5-4a48-9a22-873a3a6fab56"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["07163f03-e118-427e-a1cc-48813eaa8e7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:07:13Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-d091be9d405c6dcb524719d7d8dffaa4-pod namespace=chains-e2e-tgxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=69df9d93-1c38-4076-a18a-38d92b275ffe user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3bcfd734-67f5-4a48-9a22-873a3a6fab56"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["07163f03-e118-427e-a1cc-48813eaa8e7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:07:13Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-d091be9d405c6dcb524719d7d8dffaa4-pod namespace=chains-e2e-tgxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-tgxv/Pod/verify-enterprise-contract-d091be9d405c6dcb524719d7d8dffaa4-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=fa20a491-2bb1-4437-8d1c-be152da2cc86 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3bcfd734-67f5-4a48-9a22-873a3a6fab56"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["07163f03-e118-427e-a1cc-48813eaa8e7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:07:28Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-19845ba767f3f774db8c2fb290faa7b4-pod namespace=chains-e2e-tgxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=f4c16e19-b7c2-4d05-8426-aef86255b9ca user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3bcfd734-67f5-4a48-9a22-873a3a6fab56"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["07163f03-e118-427e-a1cc-48813eaa8e7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:07:28Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-19845ba767f3f774db8c2fb290faa7b4-pod namespace=chains-e2e-tgxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=0995007d-9904-4abd-bb8b-200580461eef user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3bcfd734-67f5-4a48-9a22-873a3a6fab56"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["07163f03-e118-427e-a1cc-48813eaa8e7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:07:28Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-19845ba767f3f774db8c2fb290faa7b4-pod namespace=chains-e2e-tgxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-tgxv/Pod/verify-enterprise-contract-19845ba767f3f774db8c2fb290faa7b4-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=93002c46-87a4-4183-b7a4-36bb76106bed user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3bcfd734-67f5-4a48-9a22-873a3a6fab56"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["07163f03-e118-427e-a1cc-48813eaa8e7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:07:34Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-j7qmv namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-j7qmv resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=0e482b2e-341b-4d47-9244-ce4cc7784444 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3fba54f-490e-4729-86d9-0f11bbc07662"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"d6de4bc7-45b6-40dc-a0dd-4efe42f8837c","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-06T07:07:39Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-0f85d82974d1fd5840575bc8357d4f1a-pod namespace=chains-e2e-tgxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=6358ac81-6a2d-40e3-bcfe-fbcd16ea2bb1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7ba344a-7fec-41dc-8faa-423419e23ed3"],"authentication.kubernetes.io/node-name":["ip-10-0-135-222.ec2.internal"],"authentication.kubernetes.io/node-uid":["d0225266-0c0c-4864-97a3-02a25cf4d1fd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["31eb186e-8868-4625-a1a5-71f670450953"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:07:39Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-0f85d82974d1fd5840575bc8357d4f1a-pod namespace=chains-e2e-tgxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=073c1634-0e9b-4846-98a4-78e7eb126235 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7ba344a-7fec-41dc-8faa-423419e23ed3"],"authentication.kubernetes.io/node-name":["ip-10-0-135-222.ec2.internal"],"authentication.kubernetes.io/node-uid":["d0225266-0c0c-4864-97a3-02a25cf4d1fd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["31eb186e-8868-4625-a1a5-71f670450953"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:07:39Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-0f85d82974d1fd5840575bc8357d4f1a-pod namespace=chains-e2e-tgxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-tgxv/Pod/verify-enterprise-contract-0f85d82974d1fd5840575bc8357d4f1a-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=b4477bc1-46b4-4310-8fd7-329a7dbccacf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7ba344a-7fec-41dc-8faa-423419e23ed3"],"authentication.kubernetes.io/node-name":["ip-10-0-135-222.ec2.internal"],"authentication.kubernetes.io/node-uid":["d0225266-0c0c-4864-97a3-02a25cf4d1fd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["31eb186e-8868-4625-a1a5-71f670450953"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:07:53Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-e605ba33545068adb57628d48a8f1761-pod namespace=chains-e2e-tgxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=8bcb331c-eda0-4dfe-ab77-ffb9367bfc77 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3bcfd734-67f5-4a48-9a22-873a3a6fab56"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["07163f03-e118-427e-a1cc-48813eaa8e7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:07:53Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-e605ba33545068adb57628d48a8f1761-pod namespace=chains-e2e-tgxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=655a0be8-253e-497d-a3c8-576d99ad443c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3bcfd734-67f5-4a48-9a22-873a3a6fab56"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["07163f03-e118-427e-a1cc-48813eaa8e7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:07:53Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-e605ba33545068adb57628d48a8f1761-pod namespace=chains-e2e-tgxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-tgxv/Pod/verify-enterprise-contract-e605ba33545068adb57628d48a8f1761-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=681d7e71-d729-48ec-8d8c-7a7987d664ca user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3bcfd734-67f5-4a48-9a22-873a3a6fab56"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["07163f03-e118-427e-a1cc-48813eaa8e7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:08:12Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-bf48347c3c27a824f305513527f34b79-pod namespace=chains-e2e-tgxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=37807f0b-0133-45f6-8908-3fe450155223 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3bcfd734-67f5-4a48-9a22-873a3a6fab56"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["07163f03-e118-427e-a1cc-48813eaa8e7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:08:12Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-bf48347c3c27a824f305513527f34b79-pod namespace=chains-e2e-tgxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=8b619096-790b-42e7-be9a-a99c43427ed5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3bcfd734-67f5-4a48-9a22-873a3a6fab56"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["07163f03-e118-427e-a1cc-48813eaa8e7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:08:12Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-bf48347c3c27a824f305513527f34b79-pod namespace=chains-e2e-tgxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-tgxv/Pod/verify-enterprise-contract-bf48347c3c27a824f305513527f34b79-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=ec6c405c-e835-4e4d-aa6b-a3f08150bd46 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3bcfd734-67f5-4a48-9a22-873a3a6fab56"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["07163f03-e118-427e-a1cc-48813eaa8e7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:08:36Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-9d4d080b7b69762fbcf4736af63208dc-pod namespace=chains-e2e-tgxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=d52bbe0a-c7b0-4c30-8e4a-f80cc41b9d58 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7ba344a-7fec-41dc-8faa-423419e23ed3"],"authentication.kubernetes.io/node-name":["ip-10-0-135-222.ec2.internal"],"authentication.kubernetes.io/node-uid":["d0225266-0c0c-4864-97a3-02a25cf4d1fd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["31eb186e-8868-4625-a1a5-71f670450953"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:08:37Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-9d4d080b7b69762fbcf4736af63208dc-pod namespace=chains-e2e-tgxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=614ccb93-135e-4bbe-90c9-487e38d760e7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7ba344a-7fec-41dc-8faa-423419e23ed3"],"authentication.kubernetes.io/node-name":["ip-10-0-135-222.ec2.internal"],"authentication.kubernetes.io/node-uid":["d0225266-0c0c-4864-97a3-02a25cf4d1fd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["31eb186e-8868-4625-a1a5-71f670450953"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:08:37Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-9d4d080b7b69762fbcf4736af63208dc-pod namespace=chains-e2e-tgxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-tgxv/Pod/verify-enterprise-contract-9d4d080b7b69762fbcf4736af63208dc-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=47ea8a70-d81c-43cf-8ef6-5ae64637a1a5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7ba344a-7fec-41dc-8faa-423419e23ed3"],"authentication.kubernetes.io/node-name":["ip-10-0-135-222.ec2.internal"],"authentication.kubernetes.io/node-uid":["d0225266-0c0c-4864-97a3-02a25cf4d1fd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["31eb186e-8868-4625-a1a5-71f670450953"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:08:52Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-6db6c60302865f7641746179d0647d30-pod namespace=chains-e2e-tgxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=b60c0878-38c3-4682-8fc8-fa69e9c7ed3f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7ba344a-7fec-41dc-8faa-423419e23ed3"],"authentication.kubernetes.io/node-name":["ip-10-0-135-222.ec2.internal"],"authentication.kubernetes.io/node-uid":["d0225266-0c0c-4864-97a3-02a25cf4d1fd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["31eb186e-8868-4625-a1a5-71f670450953"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:08:52Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-6db6c60302865f7641746179d0647d30-pod namespace=chains-e2e-tgxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=b4a8a78b-5519-4cfb-851f-0e80f6e1dafc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7ba344a-7fec-41dc-8faa-423419e23ed3"],"authentication.kubernetes.io/node-name":["ip-10-0-135-222.ec2.internal"],"authentication.kubernetes.io/node-uid":["d0225266-0c0c-4864-97a3-02a25cf4d1fd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["31eb186e-8868-4625-a1a5-71f670450953"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:08:52Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-6db6c60302865f7641746179d0647d30-pod namespace=chains-e2e-tgxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-tgxv/Pod/verify-enterprise-contract-6db6c60302865f7641746179d0647d30-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=c287556f-cfca-4fc2-ade0-4a3ffc0217e7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7ba344a-7fec-41dc-8faa-423419e23ed3"],"authentication.kubernetes.io/node-name":["ip-10-0-135-222.ec2.internal"],"authentication.kubernetes.io/node-uid":["d0225266-0c0c-4864-97a3-02a25cf4d1fd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["31eb186e-8868-4625-a1a5-71f670450953"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"19fc192b-2d20-49b0-8c34-089a19b8c6d2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-06T07:09:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=bd78714f-532c-4a21-98e5-d1be71efd8de user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:09:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=1c5503a5-3287-4a1a-88be-7b7e639d1dfe user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:09:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=c9ebd66c-39b6-418f-8c47-f9719193056e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:09:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=794b87bb-384c-4a7b-b823-79874d65981b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:09:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=148c38c8-1f2e-42d6-a519-60a57874e8e0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:09:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=53558906-8737-447e-ae17-b70f36b49c75 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:09:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=d1e80cc5-2c0e-4d94-8053-3eab98537a00 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:09:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=b3cce4d0-edd9-468c-bd78-034bcda62d93 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:09:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=10b708a8-74f4-4325-9c7b-89f35e55e65a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:09:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=944eb360-6350-4113-85bb-9b4054148fa5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:09:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=c6a52b38-9eae-43eb-b619-4f4c0e198b6d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:09:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=09c1e440-33c7-446e-88b5-fc2be519f205 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:09:07Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=5c9bb057-f17c-472d-83c4-52d92f0b76d0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:09:07Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=22b9e208-3964-4b7e-8954-68cd55495c7a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-06T07:09:07Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=833b2c14-8015-4fb2-9a07-c204491bd67b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=615f2e9a-5889-4a77-8ad8-c4e2a9598740"],"authentication.kubernetes.io/node-name":["ip-10-0-162-75.ec2.internal"],"authentication.kubernetes.io/node-uid":["93899e89-ea66-4893-be67-326bade2c913"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["f4de3677-f2a1-4d97-b654-025eb91e1bbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"88d086ad-7bf4-44b5-b366-439f409edc6b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2