2026-10-01T02:30:55Z TRC kyverno/pkg/version/version.go:49 > version hash=--- logger=setup/version v=2 version=1.26.5
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > add_dir_header=false logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > admissionReports=false logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > allowHTTPInNamespacedPolicies= logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > allowInsecureRegistry=false logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > allowedResults=pass,fail,error,warn,skip logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderr=false logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderrthreshold=0 logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > apiCallTimeout=30s logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitEnabled=true logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitRatio=0.9 logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > autoUpdateWebhooks=true logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > backgroundServiceAccountName=system:serviceaccount:konflux-kyverno:kyverno-background-controller logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > caSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-ca logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerHost= logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerPort=9443 logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitBurst=200 logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitQPS=100 logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > controllerRuntimeMetricsAddress=:8080 logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > crdWatcher=false logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > disableCertManagerController=false logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > disableLogColor=false logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > disableMetrics=false logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > dumpPatches= logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > dumpPayload=false logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > enableConfigMapCaching=true logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > enableCosignLogging=false logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > enableDeferredLoading= logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > enablePolicyException=false logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > enableReporting= logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > enableTracing=false logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > enableTuf=false logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitBurst=2000 logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitQPS=1000 logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > exceptionNamespace= logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > excludeBootstrapResources=false logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > exemplarFilter=trace-based logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > forceFailurePolicyIgnore= logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > generateMutatingAdmissionPolicy= logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > generateValidatingAdmissionPolicy= logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > httpAllowlist= logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > httpBlocklist= logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > imagePullSecrets= logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheEnabled=true logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheMaxSize=1000 logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheTTLDuration=1h0m0s logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > kubeconfig= logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > leaderElectionRetryPeriod=26s logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > legacy_stderr_threshold_behavior=true logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > log_backtrace_at=:0 logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > log_dir= logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > log_file= logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > log_file_max_size=1800 logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingFormat=text v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingtsFormat=default v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag logtostderr=true v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAPICallResponseLength=2000000 v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAdmissionReports=1000 v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditCapacity=1000 v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditWorkers=8 v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxGlobalContextEntries=0 v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxQueuedEvents=1000 v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsCASecretName= v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsHost= v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsKeyAlgorithm=RSA v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsPort=8000 v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsRenewBefore=360h0m0s v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsServerIP= v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsTLSSecretName= v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag omitEvents=PolicyApplied,PolicySkipped v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag one_output=false v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelCollector=opentelemetrycollector.kyverno.svc.cluster.local v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelConfig=prometheus v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profile=false v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profileAddress= v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profilePort=6060 v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag protectManagedResources= v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag registryCredentialHelpers=default,google,amazon,azure,github v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag renewBefore=360h0m0s v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag reportsServiceAccountName= v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag resyncPeriod=15m0s v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag serverIP= v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag servicePort=443 v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_headers=false v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_log_headers=false v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag stderrthreshold=2 v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsKeyAlgorithm=RSA v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-pair v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingAddress= v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingCreds= v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingPort=4317 v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag transportCreds= v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufMirror=https://tuf-repo-cdn.sigstore.dev v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRoot= v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRootRaw= v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 vmodule=
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookRegistrationTimeout=2m0s
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerHost=
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerPort=9443
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookTimeout=10
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/maxprocs.go:12 > setup maxprocs... logger=setup/maxprocs v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/memlimit.go:13 > setup memlimit... logger=setup/memlimit ratio=0.9 v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/signal.go:16 > setup signals... logger=setup/signals v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-10-01T02:30:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsAllowCBOR logger=klog v=1
2026-10-01T02:30:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowTLSCacheGC logger=klog v=1
2026-10-01T02:30:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformers logger=klog v=1
2026-10-01T02:30:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=UnlockWhileProcessingFIFO logger=klog v=1
2026-10-01T02:30:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsPreferCBOR logger=klog v=1
2026-10-01T02:30:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowCARotation logger=klog v=1
2026-10-01T02:30:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=WatchListClient logger=klog v=1
2026-10-01T02:30:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=AtomicFIFO logger=klog v=1
2026-10-01T02:30:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformersBatchProcess logger=klog v=1
2026-10-01T02:30:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InformerResourceVersion logger=klog v=1
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/configmap.go:36 > create metrics-config-controller... logger=setup/metrics-config-controller v=2
2026-10-01T02:30:55Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/configmap.go:52 > done creating metrics-config-controller logger=setup/metrics-config-controller v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/metrics.go:27 > setup metrics... collector=opentelemetrycollector.kyverno.svc.cluster.local creds= exemplarFilter=trace-based logger=setup/metrics otel=prometheus port=8000 tlsSecretName= v=2
2026-10-01T02:30:55Z TRC kyverno/cmd/internal/configmap.go:15 > create config-controller... logger=setup/config-controller v=2
2026-10-01T02:30:55Z INF kyverno/cmd/internal/metrics.go:159 > Starting HTTP metrics server address=[]:8000 logger=setup/metrics v=0
2026-10-01T02:30:55Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-01T02:30:56Z TRC kyverno/pkg/config/config.go:433 > defaultRegistry configured defaultRegistry=docker.io logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:30:56Z TRC kyverno/pkg/config/config.go:449 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:30:56Z TRC kyverno/pkg/config/config.go:458 > excludedGroups configured excludeGroups=["system:nodes"] includeGroups=[] logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:30:56Z TRC kyverno/pkg/config/config.go:463 > excludeUsernames not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:30:56Z TRC kyverno/pkg/config/config.go:471 > excludeRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:30:56Z TRC kyverno/pkg/config/config.go:479 > excludeClusterRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:30:56Z TRC kyverno/pkg/config/config.go:495 > generateSuccessEvents configured generateSuccessEvents=false logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:30:56Z TRC kyverno/pkg/config/config.go:501 > successEventActions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:30:56Z TRC kyverno/pkg/config/config.go:525 > webhooks configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhooks="{\"namespaceSelector\":{\"matchExpressions\":[{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"kube-system\"]},{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"konflux-kyverno\"]}],\"matchLabels\":null}}"
2026-10-01T02:30:56Z TRC kyverno/pkg/config/config.go:539 > webhookAnnotations configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhookAnnotations="{\"admissions.enforcer/disabled\":\"true\"}"
2026-10-01T02:30:56Z TRC kyverno/pkg/config/config.go:545 > webhookLabels not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:30:56Z TRC kyverno/pkg/config/config.go:559 > matchConditions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:30:56Z TRC kyverno/pkg/config/config.go:580 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:30:56Z TRC kyverno/pkg/config/config.go:595 > maxContextSize not set, using default default=2097152 logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/configmap.go:31 > done creating config-controller logger=setup/config-controller v=2
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/registry.go:18 > setup registry client... insecure=false logger=setup/registry-client secrets= v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/imageverifycache.go:10 > setup image verify cache... enabled=true logger=setup/image-verify-cache maxsize=1000 ttl=1h0m0s v=2
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/client.go:60 > create kyverno client... burst=200 kubeconfig= logger=setup/kyverno-client qps=100 v=2
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/client.go:68 > create dynamic client... burst=200 kubeconfig= logger=setup/dynamic-client qps=100 v=2
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/client.go:84 > create apiserver client... burst=200 kubeconfig= logger=setup/apiserver-client qps=100 v=2
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/client.go:76 > create metadata client... burst=200 kubeconfig= logger=setup/metadata-client qps=100 v=2
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/client.go:92 > create the kyverno dynamic client... burst=200 kubeconfig= logger=setup/d-client qps=100 v=2
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/client.go:100 > create the events client... burst=200 kubeconfig= logger=setup/events-client qps=100 v=2
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/events-client/kube-client qps=100 v=2
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/reporting.go:13 > setting up reporting... enableReporting= generate=false imageVerify=false logger=setup/setup-reporting mutate=false mutateExisiting=false v=2 validate=false
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/engine.go:62 > setup exception selector... enablePolicyException=false exceptionNamespace= logger=setup/exception-selector v=2
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/engine.go:91 > setup config map resolver... enableConfigMapCaching=true logger=setup/configmap-resolver v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/engine.go:44 > setup engine... logger=setup/engine v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.UpdateRequest v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterPolicy v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Policy v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2beta1.GlobalContextEntry v=2
2026-10-01T02:30:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:208 > Starting metrics server logger=controller-runtime/metrics v=0
2026-10-01T02:30:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:247 > Serving metrics server bindAddress=:8080 logger=controller-runtime/metrics secure=false v=0
2026-10-01T02:30:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy source="kind source: *v1beta1.ValidatingPolicy" v=0
2026-10-01T02:30:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy source="kind source: *v1beta1.NamespacedMutatingPolicy" v=0
2026-10-01T02:30:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy source="kind source: *v1beta1.NamespacedValidatingPolicy" v=0
2026-10-01T02:30:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy source="kind source: *v1beta1.ImageValidatingPolicy" v=0
2026-10-01T02:30:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy source="kind source: *v1beta1.MutatingPolicy" v=0
2026-10-01T02:30:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy source="kind source: *v1beta1.NamespacedImageValidatingPolicy" v=0
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.PolicyException v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Namespace v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.GeneratingPolicy v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRoleBinding v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.RoleBinding v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedGeneratingPolicy v=2
2026-10-01T02:30:56Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:258 > Attempting to acquire leader lease... lock=konflux-kyverno/kyverno logger=klog v=0
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=kyverno-events v=2 workers=3
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=global-context v=2 workers=1
2026-10-01T02:30:56Z TRC kyverno/pkg/event/controller.go:125 > start logger=EventGenerator v=2
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/controllers name=policycache-controller v=2 workers=3
2026-10-01T02:30:56Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:272 > Successfully acquired lease lock=konflux-kyverno/kyverno logger=klog v=0
2026-10-01T02:30:56Z TRC kyverno/pkg/leaderelection/leaderelection.go:82 > started leading id=kyverno-admission-controller-576ff55549-jdkwc logger=setup/leader-election v=2
2026-10-01T02:30:56Z TRC kyverno/cmd/kyverno/main.go:335 > MutatingAdmissionPolicy API is not registered, skipping MAP informers error="mutating admission policy API is not registered" v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Lease v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicy v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicyBinding v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.MutatingWebhookConfiguration v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingWebhookConfiguration v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRole v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.PolicyException v=2
2026-10-01T02:30:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=admissionpolicy-generator v=2 workers=2
2026-10-01T02:30:56Z TRC kyverno/pkg/utils/controller/run.go:20 > starting ... logger=admissionpolicy-generator v=2
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=certmanager-controller v=2 workers=1
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=exception-webhook-controller v=2 workers=1
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=global-context-webhook-controller v=2 workers=1
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=webhook-controller v=2 workers=2
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=status-controller v=2 workers=3
2026-10-01T02:30:56Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=celexception-webhook-controller v=2 workers=1
2026-10-01T02:30:56Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-01T02:30:56Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-01T02:30:56Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-01T02:30:56Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-01T02:30:57Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-10-01T02:30:57Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-10-01T02:30:57Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-10-01T02:30:57Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-10-01T02:30:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0
2026-10-01T02:30:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0
2026-10-01T02:30:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0 worker count=1
2026-10-01T02:30:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0
2026-10-01T02:30:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0 worker count=1
2026-10-01T02:30:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0
2026-10-01T02:30:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0 worker count=1
2026-10-01T02:30:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0 worker count=1
2026-10-01T02:30:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0
2026-10-01T02:30:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0
2026-10-01T02:30:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0 worker count=1
2026-10-01T02:30:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0 worker count=1
2026-10-01T02:30:59Z INF kyverno/pkg/logging/log.go:180 > 2026/10/01 02:30:59 http: TLS handshake error from 10.130.0.2:44068: secret "konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-pair" not found logger=webhooks/server v=0
2026-10-01T02:34:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=CREATE uid=d7e82265-5eaf-4365-8ffa-57525fea958c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=CREATE uid=d5deebee-9faf-45e0-8780-2c205119b7d7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=CREATE uid=d39a6d57-9a8e-412c-b09a-162a47640793 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=CREATE uid=93e5a74b-3258-4433-b9e7-bcbc8af1f11a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=CREATE uid=768c83b9-f0a6-4034-92d4-3fab3787b0f4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=CREATE uid=48f0c0e0-5f12-48bf-bac3-6588b591f9a1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=CREATE uid=513fde94-6217-4a88-9f31-00e0d94b3b0d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=CREATE uid=cdd9b1c5-d7d1-4ae0-a1dd-26818ce4daa9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace uid=5ba29a74-2247-4265-90d9-4c849b2e0721 v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace type=ClusterPolicy v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole type=ClusterPolicy v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole uid=8d77cd3b-f8a3-4b40-9797-8b22bcfc2bdd v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-rbcm type=ClusterPolicy v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-rbcm uid=5725a833-dc09-4c35-b68f-37bc386b9eca v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress uid=2b77b640-2817-497e-bc29-ecd39ea26453 v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress type=ClusterPolicy v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-olm type=ClusterPolicy v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-olm uid=e582cbd1-1976-473c-b754-ba6441a508d5 v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=CREATE uid=be7645d0-c187-45f5-a330-aa94e6e4d3a0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-kubearchiveconfig uid=607df021-45f9-4b4e-a6d0-1c6057f56b52 v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-kubearchiveconfig type=ClusterPolicy v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring uid=d6572106-0b53-432d-826a-e43172764d2c v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring type=ClusterPolicy v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-integration uid=aff108bd-449b-4028-8b64-d7c7dafebcb8 v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-integration type=ClusterPolicy v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-generate-konflux-viewer-access type=ClusterPolicy v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-generate-konflux-viewer-access uid=1ea3e58e-6c97-4590-ab62-6aaa65d8cbcb v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=CREATE uid=9dab6316-db5b-4563-990d-2d0b2fbae09c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-sysauth-releng uid=076848bc-09f5-4775-b81f-abb7ba1ea3a3 v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-sysauth-releng type=ClusterPolicy v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=CREATE uid=55858c28-8bc2-4b52-bc33-3407ceed9483 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:19Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-sysauth-releng\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-sysauth-releng status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-system-authenticated uid=45401b61-44b5-4dbd-8b00-410965b30ac3 v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-system-authenticated type=ClusterPolicy v=2
2026-10-01T02:34:19Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-system-authenticated\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-system-authenticated status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-01T02:34:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=CREATE uid=3ab68206-6fc7-461a-8aaa-37d33d0270b5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-docker-io-images uid=b9c16a7b-6642-40a7-b939-a287abeb2277 v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-docker-io-images type=ClusterPolicy v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=CREATE uid=1d098d71-3b81-4428-b091-1428bc911794 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=CREATE uid=02dc7ceb-fde0-44d9-812c-e5bfb0f1a215 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-binding-system-groups type=ClusterPolicy v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-binding-system-groups uid=e99ad57a-de48-40e8-a5bb-49e4fccb6ece v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=tekton-taskrun-resource-policy uid=d857832a-356c-423e-a945-6ebe94ea413f v=2
2026-10-01T02:34:19Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=tekton-taskrun-resource-policy type=ClusterPolicy v=2
2026-10-01T02:34:19Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-docker-io-images\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-docker-io-images status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-01T02:34:19Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-binding-system-groups\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-binding-system-groups status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-01T02:34:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=a31e7d05-a4de-4c76-96c1-aa4b9cd3a979 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=52b5d244-fac7-4961-8ea9-b549d6e14a3b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=1cd73183-fd25-475f-8216-be88a2da1e0f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=356c5ca8-ba85-4557-a517-463642546132 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=9e91923c-ca85-423e-b475-b34ffc15d8f7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=28d406ab-a0d5-4fd1-9e89-b8c1aea81162 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=c46026e5-6ca0-4cd7-adcc-a40773eef9e7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=345f7bc2-47e2-42aa-a87f-ae2adce981ae user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=15591435-98ee-480c-be4b-e6c6504f96d6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=b5f171aa-3a0c-42fc-8c56-7c8da2a95c47 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=a5c0b096-408d-472a-8b20-707595c5f2c9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=6f71654a-2ab5-4b0e-b6a5-efcf0753405c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=89ccb1f4-6b2c-4daa-8c74-a0fdd2f82f34 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=208500ae-efce-4f2e-8869-666c05c2a3c8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=3a182d18-9fed-4fe4-8cb3-62c5995b8c01 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=34c562ab-e7a9-4d82-a113-bdaba3e009f5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=04dd1519-4d0f-4629-8b06-a5600d5dca0b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=7abfad4f-3314-49c1-9687-9ef1de92e43a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=b43cd347-4241-42dd-9ddd-5d15e0547ecf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=24b4a96e-5869-4b60-bd17-4ee97dab62df user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=bc9b7378-7d6c-4a85-bcc5-d2f0a9e220ac user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=3c9236b1-8f2b-4ce2-9926-1237c8b92d7c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=a1e7f4b4-4163-4060-a5a1-ea541de439cf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=3d622fa6-a3fb-472a-a8cf-19170e1db32a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=9d834e74-a895-450b-9fd7-61111cb7ce69 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=4e28e6a3-9052-4255-b928-52a78b9bca8e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=1ef50eab-b8a2-4495-8571-9e0e864faa82 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=cbde81d2-168d-42a0-9672-e09017e627e4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=949247ba-8693-416b-a492-b07629a4fbaa user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=2e3964e0-5ee4-4e24-8195-9fe9a5f0b0ec user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=2f1f776b-7dc0-4543-9204-b126900ebd6c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=5994dfb2-fefe-4cac-b656-f866283c7d26 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=78441e67-dd6e-425a-9f9b-aa8ba35f1f49 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=141cc2d8-2592-4299-baf2-3029b0d2cf0b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=b6a1e9be-8b2b-404b-8a10-19f1684b8cce user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=f5d40607-3678-4a51-aa48-941ebf0a003f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=801397a6-17ed-4c1b-924a-8053bfc31026 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=aa2fda5e-0774-4e92-a708-566c4d41b88e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=6a6a5229-b2d4-43cd-b694-2a405a725d4c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=92f8ee5c-3097-4be5-b76a-730df10330fc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=28ad1fab-6599-4afe-a52c-cd33641b742b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=60e5373e-7daf-4914-9136-e1c5f871cc99 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=9611b3e2-8186-4509-8210-2f784ba2e62e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:28Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=2b5b06ae-d787-4e03-9baa-3ce902ca1237 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:28Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=6681c8b4-3d77-434d-8d5c-880d9a7f57da user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:28Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=6d0ae71f-0d24-4a5c-b55f-d01cfd5ec744 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:28Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=2bdb455f-a799-4c2b-ad07-7e1af1412a6f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:28Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=b857bd99-e729-44f9-a532-53df5d26fc4f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:28Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=4cb20b24-b33e-4a3a-86a4-e6c6c8439c93 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:28Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=6c7db560-3a38-4af7-aa83-5745638ff15f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=337c4e5d-4c57-4603-a839-53374898183a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=e566588a-7a2b-4b63-8867-48b634261175 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=8256d751-7a64-48bb-a78e-27ba2915cde3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=fd865093-fbf5-42f5-99cc-6099300b2c88 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=6a02b4df-5557-4422-bb66-3e8ce8b9c2bb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=27ecc494-8fdc-4a9c-ae52-33fbd0814c06 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=c20e04fb-1e6b-40bc-be37-bb19e6465ed6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=a3424901-3785-444b-96a0-761fe3ec5ab0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=40ceb5ed-1316-4f04-b743-ab1ba02bf817 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=d2711696-133c-4f2a-b90a-4b95bf6b04b2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=fe6b5664-529b-4a05-8333-a80633a0b757 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=10ae3578-4f42-442a-bc07-ca7a8b3f9644 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=d778a083-a694-41fd-909c-1d45c4ce31b0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=bb71d2ed-392f-4c34-8e92-dc778a8cb0c7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=80b52e06-3f19-495f-89d3-fc94d339e132 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=ee902ff9-73a6-4aab-8dee-3fc741b49ad4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=2505cd5e-2c98-4cce-b5ca-1ba414b2dfe8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=c8318aba-0890-4167-8e48-55189ab0c49f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=6fa4f46e-8a77-4008-ad5f-0f8f3d12a54e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=788c1655-74b9-41a1-b221-c80a71a3cdff user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=10575c45-3b19-4482-9861-91658bbb41af user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=9f5a5a11-a768-4f4e-87ed-3e1e9f302c8d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=8e3a4594-1f5a-442f-ab4c-6d6476e8a09f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=bf313af2-401e-4633-81be-2d15f462f9d1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=fdc4be24-3c58-4562-898b-79fc8c53c64c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=eaa99166-7106-4dbf-850c-406d3c7b6e1a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=fea36e6a-3533-482f-8823-50b815fbd535 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=5156e6e7-3407-4b85-86cb-4769cf23ba3d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=46936e85-73ff-4936-bd26-a9cd82beb10e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=bbfff105-e67e-485c-b1ef-c867ec5da11e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=b7140497-0a79-44ea-a708-a2f02a86d4d1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=46b2c085-7838-40a6-b86c-769430f869b3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=a88cbfcf-7aeb-45bd-908a-fc12acf46124 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=e69da180-1c3e-4448-b36a-e4acdd6227de user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=afd2b4b6-26e4-4da4-b00d-3482fd018004 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=f5a4a846-dde5-4830-8b71-cda370f335d8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=e1183828-0898-4ca3-bbdb-b2acba836df7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=2e7cd8fb-bd88-496b-9689-ec9af4ec38e2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=1252bddf-44e3-44db-bec3-ceea78ea11b1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=191f11af-c6d1-46e1-9083-cf8b595fa8d4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=61ca53d3-3e4b-4675-9e64-8f32a2717c02 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=d649f109-1afb-42ad-adfd-4ff60482a9fe user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=65709e27-f6f0-4cfc-9397-1208103f8fd0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=13963ff1-3453-460c-92b9-f6c95c05f7b4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=3bb9ab83-d8ec-4fbc-8b74-5a1daca78eb6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=2773f36f-c27b-4797-a0b8-f1ceecd052d0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=24c55dcd-f0b4-4de5-a3fb-3a528f9891b8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=7336c6e7-7e8e-40ef-ace2-6266a88971cf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=e954a865-def3-414e-ad6e-1af394ed4f2d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=dfced2cb-60b7-437d-b865-2fbb9905bf9b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=3b6c8bbe-3190-4032-9a40-d899e0551ecf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=368ff053-1bb9-4fee-8208-c6a56af26995 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=31a8e8d3-9833-4301-9730-fe01f34fc5ce user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=068414db-36a5-4ce1-9b52-28fd9198e138 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=9c2e37ca-998a-40a6-aebf-69c39bf2efe9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=a2807709-12bd-4be6-81b0-00c1e8cfc1d0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=45fff6d6-49cc-4aea-8f69-0e1a59dcdf07 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=c8fba5b9-5b4a-4e62-920e-7a08042856f9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=2a971e26-0daa-4db1-8459-22ce5a1c38f4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=77137ff0-5c5b-43a9-a875-6a187490f266 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=f006432b-ac3f-40a9-9ae8-bc7169e7bdff user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=6b714af2-7c81-4174-ae2d-e31de63bfc7f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=3d6e5360-c9bf-4efe-9475-61af84b67d3b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=0a2a2d0a-e002-49df-8f6a-355589d41d10 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=7555240e-c387-4091-bca4-ff8a7fd17067 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=364df551-09ea-473f-9e57-df6fa7a6b9d5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=CREATE uid=9584bd22-625f-4432-8f10-a9d1ffd5ff63 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:36Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=bootstrap-tenant-namespace-queue uid=e2ac64d4-3403-4687-8ca2-039775db4f36 v=2
2026-10-01T02:34:36Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=bootstrap-tenant-namespace-queue type=ClusterPolicy v=2
2026-10-01T02:34:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=ef0ff745-af28-45b5-8850-f3184a12301e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=69a182df-003a-4a60-8811-fc4c0f0cfe10 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=da4e4930-c662-44f8-a993-cda977e960fc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=91e72536-7b13-4284-9bd7-1ea6c25a189b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=15432e41-ad76-494f-97c1-4c76065f98d9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=46e36527-e27f-4ca5-bd16-01f821f716c6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=7b6c5512-b4a4-40f1-8d45-240eea9ca904 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=bd8fbc9d-a2ed-4db1-bd7e-e5f10744c63b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=d53db5de-fe95-40f3-b8e9-176c8afa6d19 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=5126d0f2-1faa-4911-bf78-eac197e92a49 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=7d6c45bc-4f90-4f02-b2cb-1c4414fa834f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=82aee266-3086-4380-85ba-598e446fd739 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=ddc41fd5-6a44-4dc4-906f-11faba67a2c6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=3b1c5027-882c-44de-b164-22b8cd4c4c0c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=9e4af8fb-3e4f-4c45-a945-3f59c88ff3ad user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=28b924b8-def9-4ed5-8a43-d6ed66b47b64 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=78e75731-ff1a-465c-96b1-9b984b3305b0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=0ecdb992-603b-44f8-804d-64c622fe4bb9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=97164b32-3999-4ca1-8ea3-a23c891c7611 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=0cc931ec-8fb8-44bd-b199-66186493d846 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=99dd955a-35d8-4bb3-85c1-172fed00a95d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=0d2c059c-cfb3-42a7-b9f7-07ec843187c0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=0832c660-625b-4f4a-8bdb-82c4a1d7b747 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=9f299086-fcff-47ef-b5fc-7cc4dd324941 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=0c7eada9-5022-41fb-8ae3-13ddc1a931e1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=fce326f6-40fb-4716-9ba7-ffd81dfcd948 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=89506808-17c0-41bd-8371-60b1bcd1c016 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=7bd4fea9-9058-452c-912c-7a66883ed8c7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=536138f1-113e-4c88-9732-a63dc9225993 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=07e808cb-a217-4703-aff6-6797ef627e28 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=6ad63181-835e-4d17-aec9-1410dc513cc1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=e39211a8-fd7f-4698-8a04-473b06382cec user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=d50cef23-dbfc-4e07-8f79-8e8b31518b5d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=7c34a641-2db7-4339-bace-ae8639aaa39f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=696b831f-374f-4514-b59f-6ffa12ba120d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=6661e49f-f458-459c-a9d9-06e69c8e10d9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=b3cc34b5-e710-4fec-b9b9-2f69639364ae user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=492060ab-5b9a-4870-a94b-07b3ce195400 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=f3f7870e-cca4-442a-a034-fa2c18fb6959 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=f947e321-cbaf-4a15-a545-244a436f4124 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=e3d45cf8-e7e4-4539-9ce7-1063ade2602d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=1cbe6fd1-209a-40eb-8ef4-7a2d8bf5e7f1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=3ea4f471-6e1b-4343-a0f8-ee63210d3853 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=0d2c9994-1513-4c90-b3a2-8701a4a94616 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=531fbd7a-9f07-4a16-9947-dd04409aa6af user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=d1793e64-6b8e-4645-b043-a0e496dd5a4b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=0ed38046-331b-4a59-8dfb-85b0f72bbdbe user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=bc103e0f-bc2d-44d5-92ec-b2b658235e1f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=a973ebb4-e8b1-4499-9763-099ac17be043 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=bad45d7b-de22-4c12-be62-2cf6f9654395 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=5e0c8874-71fb-4c06-9b28-94d4f90c19df user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=f64249c4-cda6-4fa1-a51c-5197f6ccfd21 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=0c9ac6c7-d15e-4ef8-90f1-2e5be440a471 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=6d2232dd-3612-48a8-b699-e8956d4996dd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=4836a7d7-20e5-4f60-9b02-bad1e71d38f0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=57c14ec1-28fa-4f80-8b90-e615b1957be8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=816a70ba-966c-4f8c-9c81-1102ac14549f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=7b7967cb-e480-4f9e-8643-80a634573d77 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=635501be-a7d3-45f0-ba7e-d10b4b302419 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:34:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=d65c8af2-b286-4b5e-a928-90d97b520ef0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:35:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29847035 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29847035 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=4c7ed609-028b-48d4-846f-8a394bea7209 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=09c82149-994f-4cdf-9fc1-fcebaa2369fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"ae0dfc4b-a59f-4b80-a5f1-dc55e26b26eb","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-01T02:35:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29847035-8tshd namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29847035-8tshd resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=5b10558c-4f35-46cf-9666-f3688d99223a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=303c185c-8b60-462e-b756-840a5ae045e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"202d31f8-f1c0-411a-b9dd-9fbe6e936f2c","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-01T02:36:20Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-project-controller","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=create-minio-bucket namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Job/create-minio-bucket resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=f2f776b8-5940-4a08-9301-0ac7e7f7f747 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:36:20Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-project-controller","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=tekton-chains-signing-secret namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Job/tekton-chains-signing-secret resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=a1a33eef-db7a-482b-9bbf-27fdc62db7fb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:36:20Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-chains-signing-secret-ktv6p namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-chains-signing-secret-ktv6p resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=5dfed024-e744-4be3-afc5-64000240755a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=303c185c-8b60-462e-b756-840a5ae045e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"202d31f8-f1c0-411a-b9dd-9fbe6e936f2c","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-01T02:36:20Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=create-minio-bucket-hrmnt namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/create-minio-bucket-hrmnt resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=df0b71ec-2856-4e1f-8c95-d056442d3a9f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=303c185c-8b60-462e-b756-840a5ae045e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"202d31f8-f1c0-411a-b9dd-9fbe6e936f2c","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-01T02:39:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=5dc7fbd8-0834-4b80-abd5-0e4317d7641e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:39:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=9be1c80a-aee7-4108-8ef7-cade3b53482f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:39:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=d5c95a53-aada-4eda-899b-719ab0f1a741 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:39:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=e66337c8-d498-4456-8047-40c099c21aa7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:39:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=7b7a1c5b-a6b0-44f0-9dd5-a21ef725d10f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:39:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=8568537a-a145-4068-9bec-9c720a1c86be user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:39:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=f3ff8638-4506-455b-a10c-eb884af99302 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:39:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=4b7b7de7-014d-40f4-90f5-d0ea7378e5d4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:39:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=82800554-535b-4730-95a8-c46c031c2ce9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:39:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=ebbd7408-f7ff-43de-8632-b89cc1971979 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:39:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=d5e81236-8692-45cc-8161-1b1f49ce44a9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:39:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=01b05b35-ef7e-43d8-991b-fe05f3494da3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:39:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=8fdee698-6523-456f-ac3d-c33829d3b024 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:39:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=5c217ae1-9998-4634-98e4-97cf85dc9be2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:39:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=e83f2dcd-34ba-4a34-a144-8b18ab3bb064 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:40:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29847040 namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Job/osd-delete-backplane-serviceaccounts-29847040 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=e1fd218f-c5b1-4ad6-846b-9f07b5ab95e6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=09c82149-994f-4cdf-9fc1-fcebaa2369fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"ae0dfc4b-a59f-4b80-a5f1-dc55e26b26eb","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-01T02:40:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29847040 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29847040 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=20391ec5-f4e2-4ce1-86ae-e72f0a6cbea9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=09c82149-994f-4cdf-9fc1-fcebaa2369fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"ae0dfc4b-a59f-4b80-a5f1-dc55e26b26eb","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-01T02:40:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29847040-2bxvd namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Pod/osd-delete-backplane-serviceaccounts-29847040-2bxvd resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=484d12c3-21a9-4d3a-bb87-b8f931472f60 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=303c185c-8b60-462e-b756-840a5ae045e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"202d31f8-f1c0-411a-b9dd-9fbe6e936f2c","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-01T02:40:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29847040-mzwr7 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29847040-mzwr7 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=78ef40dd-4cee-4897-8b6b-e877beb8abca user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=303c185c-8b60-462e-b756-840a5ae045e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"202d31f8-f1c0-411a-b9dd-9fbe6e936f2c","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-01T02:40:23Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="apps/v1, Kind=StatefulSet" gvr="apps/v1, Resource=statefulsets" kind=StatefulSet logger=webhooks/resource/validate name=affinity-assistant-15c85b7698 namespace=chains-e2e-yozo operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-yozo/StatefulSet/affinity-assistant-15c85b7698 resource.gvk="apps/v1, Kind=StatefulSet" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=2bb81732-0f5a-46f8-963b-59f7c396a8bf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=01d1707e-1fb1-4750-9614-216ca2019b9e"],"authentication.kubernetes.io/node-name":["ip-10-0-163-184.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb9884fa-aac5-4225-b99b-7db346a8d8fc"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["329b57a2-f9d0-4043-ba2d-48ed548a1e04"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:40:23Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:statefulset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=affinity-assistant-15c85b7698-0 namespace=chains-e2e-yozo operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-yozo/Pod/affinity-assistant-15c85b7698-0 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=cdc4bdeb-9034-4939-855b-41f958e00789 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3aea4bbe-153c-4d91-adbf-0c10c591655e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3fcd6e7c-3a8a-4ee8-ac90-993099256cb9","username":"system:serviceaccount:kube-system:statefulset-controller"} v=2
2026-10-01T02:40:23Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-pktcjedhce-init-pod namespace=chains-e2e-yozo operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-yozo/Pod/buildah-demo-pktcjedhce-init-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=f9eb2619-f790-45f9-bbbb-051b787ee4f6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=01d1707e-1fb1-4750-9614-216ca2019b9e"],"authentication.kubernetes.io/node-name":["ip-10-0-163-184.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb9884fa-aac5-4225-b99b-7db346a8d8fc"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["329b57a2-f9d0-4043-ba2d-48ed548a1e04"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:40:30Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-jd94q namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-jd94q resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=608894ef-6035-4acb-aafb-61d76785d295 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7685fed-275e-4aac-81db-a592ac3291d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3ad85515-d165-41e6-9408-595b4b05bee3","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-01T02:40:41Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-pktcjedhce-clone-repository-pod namespace=chains-e2e-yozo operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-yozo/Pod/buildah-demo-pktcjedhce-clone-repository-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=20b2ce99-3123-49c9-aa94-322ee64c8d43 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=01d1707e-1fb1-4750-9614-216ca2019b9e"],"authentication.kubernetes.io/node-name":["ip-10-0-163-184.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb9884fa-aac5-4225-b99b-7db346a8d8fc"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["329b57a2-f9d0-4043-ba2d-48ed548a1e04"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:41:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-xmrq2 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-xmrq2 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=1d8721af-e5d4-4fb6-aa8f-7c2bbcd386fd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7685fed-275e-4aac-81db-a592ac3291d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3ad85515-d165-41e6-9408-595b4b05bee3","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-01T02:41:08Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-pktcjedhce-prefetch-dependencies-pod namespace=chains-e2e-yozo operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=c311c577-42a1-4017-abde-b2ed425eb090 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f97f751a-eefa-4ae8-95fa-a98290e60697"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["14a4f66c-f15d-481e-a17d-5530b789ef75"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:41:08Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-pktcjedhce-prefetch-dependencies-pod namespace=chains-e2e-yozo operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=ff716af7-9c06-4deb-8a9c-0cc552fd8222 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f97f751a-eefa-4ae8-95fa-a98290e60697"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["14a4f66c-f15d-481e-a17d-5530b789ef75"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:41:08Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-pktcjedhce-prefetch-dependencies-pod namespace=chains-e2e-yozo operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-yozo/Pod/buildah-demo-pktcjedhce-prefetch-dependencies-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=9f8f8309-22bc-4568-af82-ed3babe6b024 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f97f751a-eefa-4ae8-95fa-a98290e60697"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["14a4f66c-f15d-481e-a17d-5530b789ef75"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:41:24Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-pktcjedhce-build-container-pod namespace=chains-e2e-yozo operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-yozo/Pod/buildah-demo-pktcjedhce-build-container-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=97e3ea4b-3aa5-491f-aaad-4392a16a270d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=01d1707e-1fb1-4750-9614-216ca2019b9e"],"authentication.kubernetes.io/node-name":["ip-10-0-163-184.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb9884fa-aac5-4225-b99b-7db346a8d8fc"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["329b57a2-f9d0-4043-ba2d-48ed548a1e04"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:42:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-r42th namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-r42th resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=c242f61f-8f39-44b4-b72b-9e55c84d0035 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7685fed-275e-4aac-81db-a592ac3291d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3ad85515-d165-41e6-9408-595b4b05bee3","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-01T02:43:34Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-pktcjedhce-build-image-index-pod namespace=chains-e2e-yozo operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-yozo/Pod/buildah-demo-pktcjedhce-build-image-index-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=889bcbd6-917e-48d5-aa7a-0a6222b474a4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=01d1707e-1fb1-4750-9614-216ca2019b9e"],"authentication.kubernetes.io/node-name":["ip-10-0-163-184.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb9884fa-aac5-4225-b99b-7db346a8d8fc"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["329b57a2-f9d0-4043-ba2d-48ed548a1e04"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:44:20Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-pktcjedhce-push-dockerfile-pod namespace=chains-e2e-yozo operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-yozo/Pod/buildah-demo-pktcjedhce-push-dockerfile-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=16260649-fa89-4a88-a3cb-8d70486e2646 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=01d1707e-1fb1-4750-9614-216ca2019b9e"],"authentication.kubernetes.io/node-name":["ip-10-0-163-184.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb9884fa-aac5-4225-b99b-7db346a8d8fc"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["329b57a2-f9d0-4043-ba2d-48ed548a1e04"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:44:20Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-pktcjedhce-apply-tags-pod namespace=chains-e2e-yozo operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-yozo/Pod/buildah-demo-pktcjedhce-apply-tags-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=61bf3c48-931b-4cd2-831b-f31598cd824a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f97f751a-eefa-4ae8-95fa-a98290e60697"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["14a4f66c-f15d-481e-a17d-5530b789ef75"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:44:37Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-e6aafa1a84030ebeca5abb11a727571c-pod namespace=chains-e2e-yozo operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=8e662954-e39a-43a0-97ee-ed20e77d44ec user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f97f751a-eefa-4ae8-95fa-a98290e60697"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["14a4f66c-f15d-481e-a17d-5530b789ef75"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:44:37Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-e6aafa1a84030ebeca5abb11a727571c-pod namespace=chains-e2e-yozo operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=1106ce36-66a4-4924-a4f4-87345165ce05 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f97f751a-eefa-4ae8-95fa-a98290e60697"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["14a4f66c-f15d-481e-a17d-5530b789ef75"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:44:37Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-e6aafa1a84030ebeca5abb11a727571c-pod namespace=chains-e2e-yozo operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-yozo/Pod/verify-enterprise-contract-e6aafa1a84030ebeca5abb11a727571c-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=b9fb81cf-3fd9-4c5d-9a40-611ad625f457 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f97f751a-eefa-4ae8-95fa-a98290e60697"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["14a4f66c-f15d-481e-a17d-5530b789ef75"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:45:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29847045 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29847045 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=4fd3a70a-8b8b-4d11-a885-a9002c528e36 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=09c82149-994f-4cdf-9fc1-fcebaa2369fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"ae0dfc4b-a59f-4b80-a5f1-dc55e26b26eb","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-01T02:45:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29847045-5nbw4 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29847045-5nbw4 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=ce616970-2577-42e0-8c75-1cf543bca4c8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=303c185c-8b60-462e-b756-840a5ae045e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"202d31f8-f1c0-411a-b9dd-9fbe6e936f2c","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-01T02:45:02Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-28cf34ffe1194096c530bde11d4c9380-pod namespace=chains-e2e-yozo operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=ae16a72e-3147-46e8-a097-78b338560f1e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=01d1707e-1fb1-4750-9614-216ca2019b9e"],"authentication.kubernetes.io/node-name":["ip-10-0-163-184.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb9884fa-aac5-4225-b99b-7db346a8d8fc"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["329b57a2-f9d0-4043-ba2d-48ed548a1e04"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:45:02Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-28cf34ffe1194096c530bde11d4c9380-pod namespace=chains-e2e-yozo operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=f06b97c3-7a2e-4ea1-9c57-f169c7be2cb2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=01d1707e-1fb1-4750-9614-216ca2019b9e"],"authentication.kubernetes.io/node-name":["ip-10-0-163-184.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb9884fa-aac5-4225-b99b-7db346a8d8fc"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["329b57a2-f9d0-4043-ba2d-48ed548a1e04"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:45:02Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-28cf34ffe1194096c530bde11d4c9380-pod namespace=chains-e2e-yozo operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-yozo/Pod/verify-enterprise-contract-28cf34ffe1194096c530bde11d4c9380-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=ddf58dc5-b30f-4177-9ad2-bcbfb8334c96 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=01d1707e-1fb1-4750-9614-216ca2019b9e"],"authentication.kubernetes.io/node-name":["ip-10-0-163-184.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb9884fa-aac5-4225-b99b-7db346a8d8fc"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["329b57a2-f9d0-4043-ba2d-48ed548a1e04"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=024c737c-6690-4fb3-ba3c-48f8559fda2a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=c1f47299-5a3a-4efd-9937-5000f76d8227 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=63d99dd3-9ae3-4943-b3aa-f1e1b2e99187 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=12098c3f-0131-444c-a926-93ee007e0cc4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=6838df80-2fe4-4b2a-9b4b-7d441a0727e0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=7281f335-9331-4762-a982-3762eb5a3adf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=ed4f13eb-1360-4d84-a776-cfb087dd729f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=469a9886-5b27-4ee2-a60e-e2f2011c22a7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=81164e63-3f8a-4154-b917-ea6b3a39f37e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=47b32b0b-2464-4aeb-9b92-7e90b2cd1c14 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=36d1cd2c-609e-4fc9-8e6f-4612930ce845 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=2125ce52-0e7c-4a8d-9006-4d3a50d498a0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:45:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=fc1760e3-9b96-4415-8acc-86b28bdb5781 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:45:10Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=db34af24-f64c-4817-83d5-2fc3ed9075c7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:45:10Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=ea6220c9-a5f5-47da-99dc-f6f0c919829a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4afbb5d4-1a17-40fb-bcd3-e2ce263c5a81"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["c758729d-5a2d-4ec2-9f1d-cd5b74fa808c"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"a0ee255f-faad-4ad2-a22c-0a4284724dc4","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:45:19Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-279859447efe3a816dac1aded776f163-pod namespace=chains-e2e-yozo operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=a9ec2b6c-ab3f-49e8-bc03-21b9d09e2f88 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f97f751a-eefa-4ae8-95fa-a98290e60697"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["14a4f66c-f15d-481e-a17d-5530b789ef75"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:45:19Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-279859447efe3a816dac1aded776f163-pod namespace=chains-e2e-yozo operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=5dbe23c5-6ead-4d7f-a124-c2a61b2bcd2f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f97f751a-eefa-4ae8-95fa-a98290e60697"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["14a4f66c-f15d-481e-a17d-5530b789ef75"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:45:19Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-279859447efe3a816dac1aded776f163-pod namespace=chains-e2e-yozo operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-yozo/Pod/verify-enterprise-contract-279859447efe3a816dac1aded776f163-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=fee87eed-17d7-4a2d-921e-eee02d374525 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f97f751a-eefa-4ae8-95fa-a98290e60697"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["14a4f66c-f15d-481e-a17d-5530b789ef75"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:45:34Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-e70b6a9a4c06b9d5cf3a98fcb56f437b-pod namespace=chains-e2e-yozo operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=de166873-ff06-4f66-83b9-2d6d9a230342 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f97f751a-eefa-4ae8-95fa-a98290e60697"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["14a4f66c-f15d-481e-a17d-5530b789ef75"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:45:34Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-e70b6a9a4c06b9d5cf3a98fcb56f437b-pod namespace=chains-e2e-yozo operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=fd1631e3-fdc0-4460-9b04-d9c69047100c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f97f751a-eefa-4ae8-95fa-a98290e60697"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["14a4f66c-f15d-481e-a17d-5530b789ef75"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:45:34Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-e70b6a9a4c06b9d5cf3a98fcb56f437b-pod namespace=chains-e2e-yozo operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-yozo/Pod/verify-enterprise-contract-e70b6a9a4c06b9d5cf3a98fcb56f437b-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=62c074af-b2a7-4cf7-8bdb-b2383fccb604 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f97f751a-eefa-4ae8-95fa-a98290e60697"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["14a4f66c-f15d-481e-a17d-5530b789ef75"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:45:47Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-b6fcef8d090d3cae41d9d61978999fb7-pod namespace=chains-e2e-yozo operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=484536a6-36b4-4c88-a35a-38db7a098520 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f97f751a-eefa-4ae8-95fa-a98290e60697"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["14a4f66c-f15d-481e-a17d-5530b789ef75"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:45:47Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-b6fcef8d090d3cae41d9d61978999fb7-pod namespace=chains-e2e-yozo operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=c2397e00-0f0e-4ab2-a234-45da17e67567 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f97f751a-eefa-4ae8-95fa-a98290e60697"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["14a4f66c-f15d-481e-a17d-5530b789ef75"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:45:47Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-b6fcef8d090d3cae41d9d61978999fb7-pod namespace=chains-e2e-yozo operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-yozo/Pod/verify-enterprise-contract-b6fcef8d090d3cae41d9d61978999fb7-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=8a22d195-c8fb-440f-bc6a-c51757920fd6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f97f751a-eefa-4ae8-95fa-a98290e60697"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["14a4f66c-f15d-481e-a17d-5530b789ef75"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:46:02Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-41e32f307d46c7c88bc6b1f9ebcae69e-pod namespace=chains-e2e-yozo operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=e4f0ef8a-a89d-48c8-9fd8-5052ed923d30 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f97f751a-eefa-4ae8-95fa-a98290e60697"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["14a4f66c-f15d-481e-a17d-5530b789ef75"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:46:02Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-41e32f307d46c7c88bc6b1f9ebcae69e-pod namespace=chains-e2e-yozo operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=049a3d5b-35e1-4e91-b42a-e36fc6494416 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f97f751a-eefa-4ae8-95fa-a98290e60697"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["14a4f66c-f15d-481e-a17d-5530b789ef75"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:46:03Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-41e32f307d46c7c88bc6b1f9ebcae69e-pod namespace=chains-e2e-yozo operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-yozo/Pod/verify-enterprise-contract-41e32f307d46c7c88bc6b1f9ebcae69e-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=d068d37c-f7ad-4bf6-b348-a1dfe9e082b0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f97f751a-eefa-4ae8-95fa-a98290e60697"],"authentication.kubernetes.io/node-name":["ip-10-0-134-228.ec2.internal"],"authentication.kubernetes.io/node-uid":["134b23bd-f15e-4917-bc0d-82191f9887fa"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["14a4f66c-f15d-481e-a17d-5530b789ef75"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:46:23Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-de9fbb4e0790b89a7005c8c793fc35b7-pod namespace=chains-e2e-yozo operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=121d6947-1ad7-45fc-ad15-540d57abce3a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=01d1707e-1fb1-4750-9614-216ca2019b9e"],"authentication.kubernetes.io/node-name":["ip-10-0-163-184.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb9884fa-aac5-4225-b99b-7db346a8d8fc"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["329b57a2-f9d0-4043-ba2d-48ed548a1e04"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:46:24Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-de9fbb4e0790b89a7005c8c793fc35b7-pod namespace=chains-e2e-yozo operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=6dc91ab3-606b-4d96-85dc-addae26d856c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=01d1707e-1fb1-4750-9614-216ca2019b9e"],"authentication.kubernetes.io/node-name":["ip-10-0-163-184.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb9884fa-aac5-4225-b99b-7db346a8d8fc"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["329b57a2-f9d0-4043-ba2d-48ed548a1e04"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:46:24Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-de9fbb4e0790b89a7005c8c793fc35b7-pod namespace=chains-e2e-yozo operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-yozo/Pod/verify-enterprise-contract-de9fbb4e0790b89a7005c8c793fc35b7-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=964847ce-e664-4ae0-a6d9-624703bb97ab user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=01d1707e-1fb1-4750-9614-216ca2019b9e"],"authentication.kubernetes.io/node-name":["ip-10-0-163-184.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb9884fa-aac5-4225-b99b-7db346a8d8fc"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["329b57a2-f9d0-4043-ba2d-48ed548a1e04"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:46:53Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-7a2a01f14c4051fd6023e002b1554a58-pod namespace=chains-e2e-yozo operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=d97bcea4-1e2d-4ec2-afac-fe2cd1c4c053 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=01d1707e-1fb1-4750-9614-216ca2019b9e"],"authentication.kubernetes.io/node-name":["ip-10-0-163-184.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb9884fa-aac5-4225-b99b-7db346a8d8fc"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["329b57a2-f9d0-4043-ba2d-48ed548a1e04"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:46:53Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-7a2a01f14c4051fd6023e002b1554a58-pod namespace=chains-e2e-yozo operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=315dec32-fc01-4936-8ca4-8a38a8092463 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=01d1707e-1fb1-4750-9614-216ca2019b9e"],"authentication.kubernetes.io/node-name":["ip-10-0-163-184.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb9884fa-aac5-4225-b99b-7db346a8d8fc"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["329b57a2-f9d0-4043-ba2d-48ed548a1e04"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:46:53Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-7a2a01f14c4051fd6023e002b1554a58-pod namespace=chains-e2e-yozo operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-yozo/Pod/verify-enterprise-contract-7a2a01f14c4051fd6023e002b1554a58-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=219e3de1-f5d7-484f-a6a4-88d080c2862d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=01d1707e-1fb1-4750-9614-216ca2019b9e"],"authentication.kubernetes.io/node-name":["ip-10-0-163-184.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb9884fa-aac5-4225-b99b-7db346a8d8fc"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["329b57a2-f9d0-4043-ba2d-48ed548a1e04"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:47:12Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-4b27b71b4db4753f3d7e89ea6a8c0dd8-pod namespace=chains-e2e-yozo operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=522dd244-c18a-4f43-8590-ac6aca75afe9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=01d1707e-1fb1-4750-9614-216ca2019b9e"],"authentication.kubernetes.io/node-name":["ip-10-0-163-184.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb9884fa-aac5-4225-b99b-7db346a8d8fc"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["329b57a2-f9d0-4043-ba2d-48ed548a1e04"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:47:12Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-4b27b71b4db4753f3d7e89ea6a8c0dd8-pod namespace=chains-e2e-yozo operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=0b87e32b-57a5-420f-a4fa-54231f2fe7bc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=01d1707e-1fb1-4750-9614-216ca2019b9e"],"authentication.kubernetes.io/node-name":["ip-10-0-163-184.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb9884fa-aac5-4225-b99b-7db346a8d8fc"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["329b57a2-f9d0-4043-ba2d-48ed548a1e04"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:47:12Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-4b27b71b4db4753f3d7e89ea6a8c0dd8-pod namespace=chains-e2e-yozo operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-yozo/Pod/verify-enterprise-contract-4b27b71b4db4753f3d7e89ea6a8c0dd8-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=95d9d479-439c-408a-912d-70c06cf4a63f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=01d1707e-1fb1-4750-9614-216ca2019b9e"],"authentication.kubernetes.io/node-name":["ip-10-0-163-184.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb9884fa-aac5-4225-b99b-7db346a8d8fc"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["329b57a2-f9d0-4043-ba2d-48ed548a1e04"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"6fb18017-bb71-41aa-9eec-d14767cb0d3e","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2