2026-10-02T02:44:18Z TRC kyverno/pkg/version/version.go:49 > version hash=--- logger=setup/version v=2 version=1.26.7
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > add_dir_header=false logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > admissionReports=false logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > allowHTTPInNamespacedPolicies= logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > allowInsecureRegistry=false logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > allowedResults=pass,fail,error,warn,skip logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderr=false logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderrthreshold=0 logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > apiCallTimeout=30s logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitEnabled=true logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitRatio=0.9 logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > autoUpdateWebhooks=true logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > backgroundServiceAccountName=system:serviceaccount:konflux-kyverno:kyverno-background-controller logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > caSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-ca logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerHost= logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerPort=9443 logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitBurst=200 logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitQPS=100 logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > controllerRuntimeMetricsAddress=:8080 logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > crdWatcher=false logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > disableCertManagerController=false logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > disableLogColor=false logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > disableMetrics=false logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > dumpPatches= logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > dumpPayload=false logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > enableConfigMapCaching=true logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > enableCosignLogging=false logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > enableDeferredLoading= logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > enablePolicyException=false logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > enableReporting= logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > enableTracing=false logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > enableTuf=false logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitBurst=2000 logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitQPS=1000 logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > exceptionNamespace= logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > excludeBootstrapResources=false logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > exemplarFilter=trace-based logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > forceFailurePolicyIgnore= logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > generateMutatingAdmissionPolicy= logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > generateValidatingAdmissionPolicy= logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > httpAllowlist= logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > httpBlocklist= logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > imagePullSecrets= logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheEnabled=true logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheMaxSize=1000 logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheTTLDuration=1h0m0s logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > kubeconfig= logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > leaderElectionRetryPeriod=26s logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > legacy_stderr_threshold_behavior=true logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > log_backtrace_at=:0 logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > log_dir= logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > log_file= logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > log_file_max_size=1800 logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingFormat=text v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingtsFormat=default v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag logtostderr=true v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAPICallResponseLength=2000000 v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAdmissionReports=1000 v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditCapacity=1000 v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditWorkers=8 v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxGlobalContextEntries=0 v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxQueuedEvents=1000 v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsCASecretName= v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsHost= v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsKeyAlgorithm=RSA v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsPort=8000 v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsRenewBefore=360h0m0s v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsServerIP= v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsTLSSecretName= v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag omitEvents=PolicyApplied,PolicySkipped v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag one_output=false v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelCollector=opentelemetrycollector.kyverno.svc.cluster.local v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelConfig=prometheus v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profile=false v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profileAddress= v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profilePort=6060 v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag protectManagedResources= v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag registryCredentialHelpers=default,google,amazon,azure,github v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag renewBefore=360h0m0s v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag reportsServiceAccountName= v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag resyncPeriod=15m0s v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag serverIP= v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag servicePort=443 v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_headers=false v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_log_headers=false v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag stderrthreshold=2 v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsKeyAlgorithm=RSA v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-pair v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingAddress= v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingCreds= v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingPort=4317 v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag transportCreds= v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufMirror=https://tuf-repo-cdn.sigstore.dev v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRoot= v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRootRaw= v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 vmodule=
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookRegistrationTimeout=2m0s
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerHost=
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerPort=9443
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookTimeout=10
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/maxprocs.go:12 > setup maxprocs... logger=setup/maxprocs v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/memlimit.go:13 > setup memlimit... logger=setup/memlimit ratio=0.9 v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/signal.go:16 > setup signals... logger=setup/signals v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-10-02T02:44:18Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowCARotation logger=klog v=1
2026-10-02T02:44:18Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsPreferCBOR logger=klog v=1
2026-10-02T02:44:18Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=UnlockWhileProcessingFIFO logger=klog v=1
2026-10-02T02:44:18Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=AtomicFIFO logger=klog v=1
2026-10-02T02:44:18Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=WatchListClient logger=klog v=1
2026-10-02T02:44:18Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InformerResourceVersion logger=klog v=1
2026-10-02T02:44:18Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformersBatchProcess logger=klog v=1
2026-10-02T02:44:18Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsAllowCBOR logger=klog v=1
2026-10-02T02:44:18Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowTLSCacheGC logger=klog v=1
2026-10-02T02:44:18Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformers logger=klog v=1
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/configmap.go:36 > create metrics-config-controller... logger=setup/metrics-config-controller v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/configmap.go:52 > done creating metrics-config-controller logger=setup/metrics-config-controller v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/metrics.go:27 > setup metrics... collector=opentelemetrycollector.kyverno.svc.cluster.local creds= exemplarFilter=trace-based logger=setup/metrics otel=prometheus port=8000 tlsSecretName= v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/configmap.go:15 > create config-controller... logger=setup/config-controller v=2
2026-10-02T02:44:18Z INF kyverno/cmd/internal/metrics.go:159 > Starting HTTP metrics server address=[]:8000 logger=setup/metrics v=0
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-02T02:44:18Z TRC kyverno/pkg/config/config.go:433 > defaultRegistry configured defaultRegistry=docker.io logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:44:18Z TRC kyverno/pkg/config/config.go:449 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:44:18Z TRC kyverno/pkg/config/config.go:458 > excludedGroups configured excludeGroups=["system:nodes"] includeGroups=[] logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:44:18Z TRC kyverno/pkg/config/config.go:463 > excludeUsernames not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:44:18Z TRC kyverno/pkg/config/config.go:471 > excludeRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:44:18Z TRC kyverno/pkg/config/config.go:479 > excludeClusterRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:44:18Z TRC kyverno/pkg/config/config.go:495 > generateSuccessEvents configured generateSuccessEvents=false logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:44:18Z TRC kyverno/pkg/config/config.go:501 > successEventActions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:44:18Z TRC kyverno/pkg/config/config.go:525 > webhooks configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhooks="{\"namespaceSelector\":{\"matchExpressions\":[{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"kube-system\"]},{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"konflux-kyverno\"]}],\"matchLabels\":null}}"
2026-10-02T02:44:18Z TRC kyverno/pkg/config/config.go:539 > webhookAnnotations configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhookAnnotations="{\"admissions.enforcer/disabled\":\"true\"}"
2026-10-02T02:44:18Z TRC kyverno/pkg/config/config.go:545 > webhookLabels not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:44:18Z TRC kyverno/pkg/config/config.go:559 > matchConditions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:44:18Z TRC kyverno/pkg/config/config.go:580 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:44:18Z TRC kyverno/pkg/config/config.go:595 > maxContextSize not set, using default default=2097152 logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/configmap.go:31 > done creating config-controller logger=setup/config-controller v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/registry.go:18 > setup registry client... insecure=false logger=setup/registry-client secrets= v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/imageverifycache.go:10 > setup image verify cache... enabled=true logger=setup/image-verify-cache maxsize=1000 ttl=1h0m0s v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/client.go:60 > create kyverno client... burst=200 kubeconfig= logger=setup/kyverno-client qps=100 v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/client.go:68 > create dynamic client... burst=200 kubeconfig= logger=setup/dynamic-client qps=100 v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/client.go:84 > create apiserver client... burst=200 kubeconfig= logger=setup/apiserver-client qps=100 v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/client.go:76 > create metadata client... burst=200 kubeconfig= logger=setup/metadata-client qps=100 v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/client.go:92 > create the kyverno dynamic client... burst=200 kubeconfig= logger=setup/d-client qps=100 v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/client.go:100 > create the events client... burst=200 kubeconfig= logger=setup/events-client qps=100 v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/events-client/kube-client qps=100 v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/reporting.go:13 > setting up reporting... enableReporting= generate=false imageVerify=false logger=setup/setup-reporting mutate=false mutateExisiting=false v=2 validate=false
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/engine.go:62 > setup exception selector... enablePolicyException=false exceptionNamespace= logger=setup/exception-selector v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/engine.go:91 > setup config map resolver... enableConfigMapCaching=true logger=setup/configmap-resolver v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/engine.go:44 > setup engine... logger=setup/engine v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterPolicy v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Policy v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2beta1.GlobalContextEntry v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.UpdateRequest v=2
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:208 > Starting metrics server logger=controller-runtime/metrics v=0
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:247 > Serving metrics server bindAddress=:8080 logger=controller-runtime/metrics secure=false v=0
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy source="kind source: *v1beta1.ImageValidatingPolicy" v=0
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy source="kind source: *v1beta1.MutatingPolicy" v=0
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy source="kind source: *v1beta1.ValidatingPolicy" v=0
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy source="kind source: *v1beta1.NamespacedValidatingPolicy" v=0
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy source="kind source: *v1beta1.NamespacedImageValidatingPolicy" v=0
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy source="kind source: *v1beta1.NamespacedMutatingPolicy" v=0
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.GeneratingPolicy v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedGeneratingPolicy v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Namespace v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRoleBinding v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.RoleBinding v=2
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:258 > Attempting to acquire leader lease... lock=konflux-kyverno/kyverno logger=klog v=0
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=kyverno-events v=2 workers=3
2026-10-02T02:44:18Z TRC kyverno/pkg/event/controller.go:125 > start logger=EventGenerator v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=global-context v=2 workers=1
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/controllers name=policycache-controller v=2 workers=3
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:272 > Successfully acquired lease lock=konflux-kyverno/kyverno logger=klog v=0
2026-10-02T02:44:18Z TRC kyverno/pkg/leaderelection/leaderelection.go:82 > started leading id=kyverno-admission-controller-c44dccd8c-fnfdw logger=setup/leader-election v=2
2026-10-02T02:44:18Z TRC kyverno/cmd/kyverno/main.go:335 > MutatingAdmissionPolicy API is not registered, skipping MAP informers error="mutating admission policy API is not registered" v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Lease v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicyBinding v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.PolicyException v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.PolicyException v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicy v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.MutatingWebhookConfiguration v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingWebhookConfiguration v=2
2026-10-02T02:44:18Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRole v=2
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0 worker count=1
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0 worker count=1
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0 worker count=1
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0 worker count=1
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0 worker count=1
2026-10-02T02:44:18Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0 worker count=1
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=global-context-webhook-controller v=2 workers=1
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=celexception-webhook-controller v=2 workers=1
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=status-controller v=2 workers=3
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=webhook-controller v=2 workers=2
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=certmanager-controller v=2 workers=1
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=exception-webhook-controller v=2 workers=1
2026-10-02T02:44:18Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=admissionpolicy-generator v=2 workers=2
2026-10-02T02:44:18Z TRC kyverno/pkg/utils/controller/run.go:20 > starting ... logger=admissionpolicy-generator v=2
2026-10-02T02:44:18Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-02T02:44:18Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-02T02:44:18Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-02T02:44:18Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-02T02:47:31Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=CREATE uid=b19528ca-8d79-4c7c-898b-5496f070c3dd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=CREATE uid=7c73edc4-4085-4a3c-bc08-e5ba749cd6ce user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=CREATE uid=1e088f73-5787-467a-beb8-a95ff29d4521 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=CREATE uid=7dc0e6b7-e37c-47cb-b730-15040feccf3a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=CREATE uid=6b79fbdc-de52-46c3-ac06-6ec13074e0ba user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=CREATE uid=7cbcb713-ee5e-4993-b124-67f71e8addd8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=CREATE uid=5ea0af87-89a7-4065-9dfd-2b2f1b785e5a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=CREATE uid=55044ee1-5566-4092-83aa-c5b3d36a66ba user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace type=ClusterPolicy v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace uid=1639d318-c950-4f5d-975b-97181b4bbc29 v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=CREATE uid=3ade65d3-a52c-45a0-86b5-10b53e263924 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-rbcm uid=78842069-92b0-4678-a7a9-7982bb9561c7 v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-rbcm type=ClusterPolicy v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-olm uid=73133c1a-2f42-43e9-a76a-23429b4f7321 v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-olm type=ClusterPolicy v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress uid=7888c7f5-9fde-4321-b0ec-b2842876f76e v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress type=ClusterPolicy v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring type=ClusterPolicy v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring uid=988975e2-d0a3-47e5-81e0-4c32ccc1ef4d v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole uid=ddea2191-88d8-4e7f-acff-9edacdffedd4 v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole type=ClusterPolicy v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-kubearchiveconfig uid=ba08f04b-2ae4-4092-8c1b-44948f64dd1d v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-kubearchiveconfig type=ClusterPolicy v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-integration uid=06080f57-e01f-45da-a51f-28be8275e650 v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-integration type=ClusterPolicy v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-generate-konflux-viewer-access uid=543e97f6-2844-457b-8a45-bb7fa0d16c46 v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-generate-konflux-viewer-access type=ClusterPolicy v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=CREATE uid=a9bf0e30-43a1-4768-88ef-43212f72daf9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-system-authenticated uid=9eadd4a3-01a1-4374-8f48-d21d90c5efca v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-system-authenticated type=ClusterPolicy v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=CREATE uid=88660047-e426-4d89-8d54-8e3fbd3bc826 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-sysauth-releng uid=5d307625-5856-4e4e-835b-a85a7a69643c v=2
2026-10-02T02:47:31Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-sysauth-releng type=ClusterPolicy v=2
2026-10-02T02:47:31Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-system-authenticated\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-system-authenticated status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-02T02:47:31Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-sysauth-releng\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-sysauth-releng status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-02T02:47:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=CREATE uid=da614682-9e55-4f80-8a38-87131ce4f17f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=CREATE uid=5a544fe9-edb9-4d1c-af09-f0faf1cc3f8e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:32Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=tekton-taskrun-resource-policy uid=8176e82b-8871-4a62-9e81-039a71be743c v=2
2026-10-02T02:47:32Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=tekton-taskrun-resource-policy type=ClusterPolicy v=2
2026-10-02T02:47:32Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-binding-system-groups type=ClusterPolicy v=2
2026-10-02T02:47:32Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-binding-system-groups uid=799f13b6-bbb6-4a73-bec7-6b5f27638ef9 v=2
2026-10-02T02:47:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=CREATE uid=9ca1ed52-a49f-46e2-940d-b4ce1a764e47 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:32Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-docker-io-images type=ClusterPolicy v=2
2026-10-02T02:47:32Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-docker-io-images uid=99e5c7d2-8337-4d41-bfdf-251d0475decd v=2
2026-10-02T02:47:32Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-binding-system-groups\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-binding-system-groups status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-02T02:47:32Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-docker-io-images\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-docker-io-images status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-02T02:47:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=b6cdb4b6-67d4-475a-b303-10a6f810e339 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=90eed185-ef42-4a3f-abae-3935efd028d6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=22ebcdd5-d6a2-4554-9fb6-ec3d9f2e7f30 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=01317307-9451-4c2e-a139-2e8d903e3439 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=33f7c636-3eb1-4a51-b42d-e6b756672960 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=100cc531-9056-4f77-beb6-6f85126f0cef user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=bba26b2a-9498-4ef4-af05-81ca06aa645d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=abd28b4c-f7aa-460e-a914-0032adf1ada0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=60bdabd7-be7a-4a41-987c-d2ba2fbf5cd5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=817f82fc-ff1b-4375-b252-bf84ceb9755d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=bb7bcd36-2fc7-45f0-91a5-4afa2a3a15c5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=3305a487-c9ba-4798-9873-c3344d70ffd3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=7eb6e60c-452e-419d-8b48-b26b0d6052fe user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=9fba08c3-3201-483f-98fb-591bf873c1f4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=f122d6c2-985e-40f8-a2cb-9635c94d6f39 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=3caeec60-7f14-4c1b-9f99-04a858053eef user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=57a4f2d7-c13e-49ae-a7c8-d0dd36003737 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=c270af03-5594-4341-afdd-a9226256bb90 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:37Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=5fd18696-4038-4652-8ac2-a777ef27fc1e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:37Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=059ae897-d0af-4bc8-b577-f983275c3ff2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:37Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=2df06672-da9a-484e-93ad-9e2d48949af7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:37Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=295bda42-fdd9-47d3-9d06-e0ae279eb815 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:37Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=3a886a51-ea20-4f1b-91d9-1baebb63ce1f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:37Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=ab72daa0-71e0-4a37-82e1-a39a86696b77 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:37Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=2261ef22-767a-4091-8d2c-e14c5b5dbf36 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:37Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=ba488c9a-1833-4b8f-a448-60c223579040 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:37Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=a0736f72-e176-4920-b004-f40d74f06dd7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:37Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=eefa70bf-3a1f-424b-8655-cf3231963be2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:37Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=074989b3-8a89-4a06-a4f8-63ebc249e228 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:37Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=dc501591-9a6b-46f4-b56a-d014e184e828 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:37Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=755e6389-1a2b-4524-aa26-637c8c7b9efb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:37Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=bfbf9e17-cd6c-42b3-920e-cdddbcb65286 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:37Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=a7977960-031e-421f-8a39-3866303b231d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:37Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=1551ae3d-ec87-4c78-bbbf-3aad6a9c81fd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:37Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=9ff9349a-f9b6-4b97-9e19-df545f8c232d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:37Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=b9fbc2c6-ef65-4b2d-a186-b9eddaf6dde7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=f14ca6c9-a8c8-4215-88d8-10118cd7d2e9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=720d75d9-a1ce-4691-bc05-94c3babf311a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=bad9116f-93f4-4e4e-98c2-aa26f335ed13 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=f827608e-9cb9-4016-b854-3a01c563df28 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=1daf2cb9-4909-49eb-9db0-cb3badb8eca9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=e67e7e71-abf9-4ef6-8a46-4f78da821451 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=a3d7bc3e-27b9-4f11-93b2-3ec1f2b3119e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=9c74eac8-f27f-4f39-9905-ee943f2b6f18 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=b64881c2-9fc5-4836-8d7a-27bdffa6fdd2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=2e9c9d0b-de04-4388-9b4b-86020c740aa3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=41b9ddc9-9e25-45ab-8e7c-e12acfc54c34 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=5158a464-b3a0-4991-bb50-cb6063d78d4d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=b5f6a782-5c0a-445a-b933-163ad8da8ce2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=6c8704aa-4fa6-4f9c-b72f-0513013dc267 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=d9b2c842-920d-4541-9aa0-8a1513adafae user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=db9bd217-2c3a-4083-9419-a07be9124b59 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=dbdadb3a-d57b-4f8b-a180-8a4b1eb8d6f6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=165d0ce7-f315-4c1e-81f5-ac042bb2910b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=3abd28d6-9dc1-46ba-b184-3325fe825cbf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=a54404b0-b363-4a28-9720-6ebc5b69089f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=95299bfc-32d9-4c8b-bfbf-03de016ade8b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=ba5d3b34-3e34-4932-b7c8-ada067579bae user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=586a74b6-93f6-49b8-a844-8e41bff346d7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=9d79c45f-cffe-4af7-97e9-864b7501e07f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=01bdf7af-2a08-4b40-9420-d66fa5c14e66 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=437f65d2-3152-4043-b6b2-7eeba66092a4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=401b97b9-7e3d-48d3-8a4e-9bac855574d5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=ca69cbfc-7487-4dba-8c63-b4e343f2af6f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=ea5c9394-52bc-4f77-a237-778287e65ba1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=4b020012-f32a-4e2a-a01f-8e605797f9dd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=5de39b44-1d32-4edb-b246-8ae9e15c3aa5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=1072fb68-5ce0-4d21-a25e-8d436bb1b23a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=58c902d8-c0ed-44c5-a5f2-a3d4544dbce2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=a7d80dd9-97bf-4c26-8f03-d565de341a78 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=fad0e71b-0fe3-4f14-a1e5-0030642c97a2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=cc46b145-feb1-48f3-84c6-6740539e9062 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=523c129e-e18f-43bb-b0c7-42c30f645604 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=1d643be5-7271-47fb-b451-459f3ce009b3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=bb73237f-5516-4b38-9f42-029aa1606bb5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=ed99f305-d34d-402a-8029-ad8ebeeac2b3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=f95ba8e9-f281-4744-bcdd-588bbf19daf4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=cbcc04f1-afbe-4ff4-9f5d-bbce8cbcf720 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=8688ad40-1938-4e03-9e24-8b606197b198 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=0c78cec5-e2c7-4a9b-a1a6-eea25b413e69 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=b1c77cfb-96bb-4248-8765-04e8d0fb5634 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=978e98ae-3303-424f-bc67-289c97c29c94 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=f4a1575b-7247-457f-b43e-3ab889d0f99b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=9eb351f5-4372-4b5f-89e1-16657923a19c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=87124de5-e497-49cf-9ef3-7cf076311753 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=133294b5-0159-4301-9902-2573770821c3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=756e14d8-e701-46d4-99b1-90173f84ce2c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=5d1aedbe-6d28-4dc8-b9c9-8585be276e7e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=1ccd2653-321f-4b7f-ad3c-fd159b20d3c6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=3ee2133e-5095-4cb4-864a-d9fed7ec321a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=c31c7dc7-decb-4bd6-a930-76c3511e6678 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=ab191a44-a69b-4ab1-a28c-2dc316610721 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=863040b9-4c0e-44f3-98c4-85eb884680bb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=2ed6cc4f-d724-478b-9aed-ef60a021ca00 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=791e5c02-f732-43b5-87f2-eead02f5ea14 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=6a97ec4c-edba-429b-8621-a845b6373f6e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=1a7b87fd-9c37-4eca-a76d-259571eeab7b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=88c000ca-08d4-40e6-b06c-aa9fdea03eda user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=ceb2a6af-5153-4497-a1e3-c091e6c454e2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=556f9e15-3c73-4234-8998-3ab448237f11 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=1f1f9009-150f-4e44-b1bc-814761aa9ca4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=7ca87e47-ed39-4df2-b136-453a0653bf8d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=43613be6-61a7-47cb-9716-deae0a510de0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=e1e769bd-375b-4c50-9e65-e52c8227183c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=b3d49fbe-bf1c-44ac-b967-bfa48e909edf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=b2415f08-a7a1-4dbe-b749-380324cc3bdb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=e095188b-c643-434d-a369-c089ee81506e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=7ce245ba-2e42-4ce0-b143-54034797766e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=fdf40cc4-b1e0-48ef-aad6-d5116b3629cb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=a8464c5c-2612-4f44-8a7b-3e13b2043e6c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=435c42fc-379e-40eb-9f60-ec5a151a311d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=aff8c50c-5ee4-45f6-917d-41ebbc07d157 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=e10f7f0d-8970-4280-8b31-a3113820ffed user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=76bafb8d-25cd-4cdf-b378-4af27ec7ec89 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=18e19086-023d-4c85-ba76-7f19131c2937 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=2c9d9b08-6e2c-4e78-be97-913e1ca6e7cf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=b3729836-c0a3-49f3-b23a-ecb5bf58fe97 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=c5b70bfa-d862-4212-b5cc-ebf263a1f737 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=66e19596-9079-43fc-b531-2ce7ad6abf2e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=7ebb5014-bea6-451e-b648-abcbdd958069 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=040d3b46-690b-4c43-b150-bc5d9d8404b1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=126e2ccd-6d7c-438d-9ce4-72bc09341323 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=124edd51-03f1-451d-964b-8aa1809f5124 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=da65425b-2015-4c4e-900e-67ced66d0d15 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=88e3a999-9541-4eb0-a94e-9a779bc53ce9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=b60fda69-daa7-4487-a134-7a61846d1866 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=5d759b84-1b49-4714-9142-978152e6ab8e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=d35cfda7-fa34-4e2f-b50c-4c27c529da41 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=9e20ddf0-5f54-432f-9aab-b22f718db5bf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=72990423-4678-4bd5-940c-95339d3833e9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=9d2ca9a1-4b81-434a-bd42-6139388d2184 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=20d34ff1-ad64-413c-80e1-225ee128ac1d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=be389d05-16f0-4585-a700-cd6775943c4f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=bccf3f39-2058-42aa-9ccd-ca5a8f065caf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=b6816b00-6888-4130-9295-57fbd82b20c8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=02caee85-e4c7-4ac8-ba45-fb60ec3f5c1c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=8ec20a1a-4b72-4ec9-b847-35d0c06347d0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=6dbfcd73-31ee-465c-ad73-72854e694614 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=973343e7-288a-4811-88d0-8a5e20584610 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=3263d6ed-90fb-42ec-a810-276b114c2f42 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=248f60d3-96be-4156-bc40-7e80da2ad2de user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=b5f62b4b-ad49-494d-8e38-b591431e578e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=CREATE uid=b8853f48-f852-4e1b-9a9a-1d7b002609fd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:51Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=bootstrap-tenant-namespace-queue uid=dbdfb869-e04b-4581-8200-0179a3d3a4e8 v=2
2026-10-02T02:47:51Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=bootstrap-tenant-namespace-queue type=ClusterPolicy v=2
2026-10-02T02:47:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=d843c266-61e2-494b-8072-376eead9c761 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=0d2c6c4d-1a86-453f-ac12-2455da2b84d9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=ff232d6d-8e6b-4693-b6a2-87b918dc8bc9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=2aab67be-0bb9-4bbe-a1c6-d3114828b2b2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=eec93f2d-fa01-4d02-8b8d-2ba377c43ce5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=bbc6c748-c10d-45eb-a597-6c7ce53e1d6a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=d8a4bdfe-44ff-4481-bc6d-2a4bb13915cf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=d40519c4-6a67-418c-abcf-e101baf9751e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=d5e7401c-9557-405d-86fa-692006104ae1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=57ad2046-9aed-470e-9da6-c38fe89302db user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=9da95ce6-6b79-42d6-9a68-2e2d6781804e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=f41bf026-1534-4003-9d51-fd37100df955 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=3624e734-30fc-4a93-aaae-098d5cb42572 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=4ea57f91-f6c2-403f-a931-d55fcd48451e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=e658eac7-7dba-46a0-b86d-6c55bc1739ac user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=1c0977bb-cb0a-4d9e-a6f0-a4a16bdf8b52 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=95b29c01-a40b-4d82-b7b5-bcb7be542541 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=d5d9a229-015d-42d4-beb7-41e542059be9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=e60ede77-b986-47cc-8853-937ce368443d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=f78618b0-01fc-42e9-83cb-e9137b8d13a4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=cfdd163f-dd8a-4b96-9ae0-a203de360892 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=9c03782f-6798-4f30-8b9a-ba7540f85124 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=e9013173-462f-41f0-8b91-58a9a42d739b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=918e1a0c-01e5-4750-b2dd-d777242ab8cb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=fe3b44d3-8f19-48d6-97bd-e429fcac0998 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=e631660b-35b0-467f-96e0-defef7fff881 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=9ab59ccc-e1bc-4d21-9b3b-e6785dc81d18 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=50e42b90-c6a0-47fd-a4fc-585d5384ba5a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:47:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=70da9203-47e8-43c3-bc31-478e87a0d2e3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:48:39Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-project-controller","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=create-minio-bucket namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Job/create-minio-bucket resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=2647317d-26d4-4e9f-b0ce-908eb96988e0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:48:39Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-project-controller","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=tekton-chains-signing-secret namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Job/tekton-chains-signing-secret resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=5b82aeeb-1d6f-42e5-bfc4-ebd215bd9e33 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:48:39Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=create-minio-bucket-z7pp5 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/create-minio-bucket-z7pp5 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=40d4875a-b6c5-4d23-9392-5521c75a1956 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ba5dfe4-9873-4a16-a953-6f076a67030e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"7c737f71-3608-4970-99a4-d72850ed4fdb","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-02T02:48:39Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-chains-signing-secret-4gdt4 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-chains-signing-secret-4gdt4 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=d385d814-017e-44f8-943c-e5151356860b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ba5dfe4-9873-4a16-a953-6f076a67030e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"7c737f71-3608-4970-99a4-d72850ed4fdb","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-02T02:50:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29848490 namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Job/osd-delete-backplane-serviceaccounts-29848490 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=5c35fd9e-5b1e-4166-86c1-e75ff767f193 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bcb2b29a-42af-4f67-97cc-536a75b56e2a"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"e4dc6253-3e7a-43e0-8bd1-b7d59eac096f","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-02T02:50:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29848490 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29848490 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=d2d2dd87-4ab6-40de-9b1b-2b34d1e2e534 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bcb2b29a-42af-4f67-97cc-536a75b56e2a"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"e4dc6253-3e7a-43e0-8bd1-b7d59eac096f","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-02T02:50:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29848490-hxdlg namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Pod/osd-delete-backplane-serviceaccounts-29848490-hxdlg resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=459509ce-2db7-4a5c-abd9-4dc5c1f92727 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ba5dfe4-9873-4a16-a953-6f076a67030e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"7c737f71-3608-4970-99a4-d72850ed4fdb","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-02T02:50:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29848490-c2g7j namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29848490-c2g7j resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=b44573d5-6a63-44e1-b237-93acd467c57e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ba5dfe4-9873-4a16-a953-6f076a67030e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"7c737f71-3608-4970-99a4-d72850ed4fdb","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-02T02:52:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=e1ab00f2-9bc0-48c8-be78-5241430199b6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:52:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=99a13c7a-30d3-49b8-8266-5810bdd6a243 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:52:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=7e6d00f6-f5e2-4e2e-85d2-b537fc01ecf3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:52:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=159db161-0991-4904-a2ff-a3cf1d367b47 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:52:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=f8334d4d-6f88-4af6-86c5-9c79a28490b6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:52:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=746a1f2b-3507-42fe-8b09-d44433711035 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:52:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=12d24388-53d3-439e-854b-87674a2ff376 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:52:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=12586623-8ac0-46a7-839e-57d14b4d3fbf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:52:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=53e0a380-bff8-467a-baee-24bf7df98e78 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:52:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=07be277d-0c50-433f-8d83-a4ab2dbe9500 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:52:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=8369c661-b209-4aac-8d81-0a6a33876a0e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:52:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=51176b69-2b9a-4320-9664-7297e1bf5f2c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:52:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=f86c879c-bb14-4c2f-abb0-96f4364ee089 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:52:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=dde3b9e7-bfcd-475d-bca5-b334760ad312 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:52:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=d543a980-59f0-4635-bd84-4c056c7bcf77 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:53:18Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="apps/v1, Kind=StatefulSet" gvr="apps/v1, Resource=statefulsets" kind=StatefulSet logger=webhooks/resource/validate name=affinity-assistant-6914d2d0cc namespace=chains-e2e-kscf operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kscf/StatefulSet/affinity-assistant-6914d2d0cc resource.gvk="apps/v1, Kind=StatefulSet" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=7d1816f6-587e-493a-a948-a1a0833b2116 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8d93c68-9ab2-4df7-9ba2-696ee156c3ad"],"authentication.kubernetes.io/node-name":["ip-10-0-171-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["81b1e7d0-3412-4a89-9c42-4ba137475457"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["a67e5fd3-c841-4501-bf1e-d5d3b9c03f63"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:53:19Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:statefulset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=affinity-assistant-6914d2d0cc-0 namespace=chains-e2e-kscf operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kscf/Pod/affinity-assistant-6914d2d0cc-0 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=6d395554-6c58-4c93-9624-803282134162 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=711e588f-5588-4a14-a4f2-01d11555da37"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"5c31bf26-e6de-49f7-a598-3f12be7e3575","username":"system:serviceaccount:kube-system:statefulset-controller"} v=2
2026-10-02T02:53:19Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-ozufxbwwvs-init-pod namespace=chains-e2e-kscf operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kscf/Pod/buildah-demo-ozufxbwwvs-init-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=9cc0c7ba-b7b9-4ae9-9a0c-efa39482af0b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=49b43665-9283-480a-a242-baa09350cbd1"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dbede71c-6d1e-4eef-b90f-c8ed081d1c98"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:53:34Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-ozufxbwwvs-clone-repository-pod namespace=chains-e2e-kscf operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kscf/Pod/buildah-demo-ozufxbwwvs-clone-repository-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=958137d6-5f84-45c8-ac7e-39c076526c94 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=49b43665-9283-480a-a242-baa09350cbd1"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dbede71c-6d1e-4eef-b90f-c8ed081d1c98"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:53:47Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-pph8c namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-pph8c resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=6e8f6e92-1d20-4b6c-9443-97879596a575 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=893bd8ab-22c8-493e-9e46-3245df4a28c3"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"c6834dd0-b926-4cc3-bfe1-2efe72f755ac","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-02T02:53:58Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-ozufxbwwvs-prefetch-dependencies-pod namespace=chains-e2e-kscf operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=b48d7afe-36c0-48cd-a4d3-af86e9f8e5f2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=49b43665-9283-480a-a242-baa09350cbd1"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dbede71c-6d1e-4eef-b90f-c8ed081d1c98"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:53:58Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-ozufxbwwvs-prefetch-dependencies-pod namespace=chains-e2e-kscf operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=b0de5d91-b5b1-4dc7-b7f4-ff21736f9338 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=49b43665-9283-480a-a242-baa09350cbd1"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dbede71c-6d1e-4eef-b90f-c8ed081d1c98"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:53:58Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-ozufxbwwvs-prefetch-dependencies-pod namespace=chains-e2e-kscf operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kscf/Pod/buildah-demo-ozufxbwwvs-prefetch-dependencies-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=a986215d-8ca1-48ea-a314-746e2a505645 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=49b43665-9283-480a-a242-baa09350cbd1"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dbede71c-6d1e-4eef-b90f-c8ed081d1c98"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:54:11Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-ozufxbwwvs-build-container-pod namespace=chains-e2e-kscf operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kscf/Pod/buildah-demo-ozufxbwwvs-build-container-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=df39d68f-0c97-40c2-9d0b-d65c3e159ee3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=49b43665-9283-480a-a242-baa09350cbd1"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dbede71c-6d1e-4eef-b90f-c8ed081d1c98"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:55:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29848495 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29848495 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=872d1f44-2c6d-44ce-8c01-e7f1165c060a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bcb2b29a-42af-4f67-97cc-536a75b56e2a"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"e4dc6253-3e7a-43e0-8bd1-b7d59eac096f","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-02T02:55:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29848495-xg84f namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29848495-xg84f resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=980516e7-6d3a-4e01-96c6-ba0d4d134e29 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ba5dfe4-9873-4a16-a953-6f076a67030e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"7c737f71-3608-4970-99a4-d72850ed4fdb","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-02T02:55:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=b0642a05-f1bb-4785-9c2c-27099c3d12ee user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:55:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=f73a20c2-4d7a-4b39-9af2-f2be5aa603f4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:55:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=c5c3d22c-00df-4e20-a789-08e9d54537f9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:55:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=dc7b97d8-6f34-4b5c-bbbe-5cd89648cb60 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:55:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=49481e31-3f73-4168-9262-f12b9679dd06 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:55:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=97f9a328-3ec3-4b7b-bb17-dfaea1da5888 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:55:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=f285060b-5772-4447-a78a-0e2efdaf5b4a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:55:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=beb3400a-961d-4870-8080-c801baef8ca9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:55:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=450bbf52-2ce0-4202-967f-fbd0143b58d4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:55:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=0920c45d-5319-4b31-99b5-be831f5cc27a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:55:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=3472637c-d912-4f50-af28-bb7070131996 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:55:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=8775b9fe-cf3d-40cc-ba2a-a50cc56e601d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:55:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=55389531-3580-4377-aa98-538af360c821 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:55:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=6d3e7812-9d3e-4007-ba4c-aa6b7cbff4f6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:55:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=de1c009b-b1cc-4ce4-aa5f-23dbbad43406 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:56:18Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-ozufxbwwvs-build-image-index-pod namespace=chains-e2e-kscf operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kscf/Pod/buildah-demo-ozufxbwwvs-build-image-index-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=eef2cc4d-924e-4168-bbe6-7aaadb9be46d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8d93c68-9ab2-4df7-9ba2-696ee156c3ad"],"authentication.kubernetes.io/node-name":["ip-10-0-171-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["81b1e7d0-3412-4a89-9c42-4ba137475457"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["a67e5fd3-c841-4501-bf1e-d5d3b9c03f63"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:57:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-ozufxbwwvs-apply-tags-pod namespace=chains-e2e-kscf operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kscf/Pod/buildah-demo-ozufxbwwvs-apply-tags-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=7a438af9-e892-49ab-a663-0e8e899c19ae user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=49b43665-9283-480a-a242-baa09350cbd1"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dbede71c-6d1e-4eef-b90f-c8ed081d1c98"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:57:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-ozufxbwwvs-push-dockerfile-pod namespace=chains-e2e-kscf operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kscf/Pod/buildah-demo-ozufxbwwvs-push-dockerfile-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=d04c752d-26f1-4f4b-a7dc-ebde9806b348 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=49b43665-9283-480a-a242-baa09350cbd1"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dbede71c-6d1e-4eef-b90f-c8ed081d1c98"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:57:14Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-e55e2a5ab1ae8d4e156b48d22d043e87-pod namespace=chains-e2e-kscf operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=a582bcd5-507e-46db-89f2-224cf3f00d07 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8d93c68-9ab2-4df7-9ba2-696ee156c3ad"],"authentication.kubernetes.io/node-name":["ip-10-0-171-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["81b1e7d0-3412-4a89-9c42-4ba137475457"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["a67e5fd3-c841-4501-bf1e-d5d3b9c03f63"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:57:14Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-e55e2a5ab1ae8d4e156b48d22d043e87-pod namespace=chains-e2e-kscf operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=a30abd04-1bbc-4605-9518-171898c9b724 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8d93c68-9ab2-4df7-9ba2-696ee156c3ad"],"authentication.kubernetes.io/node-name":["ip-10-0-171-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["81b1e7d0-3412-4a89-9c42-4ba137475457"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["a67e5fd3-c841-4501-bf1e-d5d3b9c03f63"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:57:14Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-e55e2a5ab1ae8d4e156b48d22d043e87-pod namespace=chains-e2e-kscf operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kscf/Pod/verify-enterprise-contract-e55e2a5ab1ae8d4e156b48d22d043e87-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=d55ed988-3188-4b85-bac3-7f75c063befe user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8d93c68-9ab2-4df7-9ba2-696ee156c3ad"],"authentication.kubernetes.io/node-name":["ip-10-0-171-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["81b1e7d0-3412-4a89-9c42-4ba137475457"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["a67e5fd3-c841-4501-bf1e-d5d3b9c03f63"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:57:33Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-kx98m namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-kx98m resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=bf71aeb5-e3e5-4738-8520-d468b2556155 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=893bd8ab-22c8-493e-9e46-3245df4a28c3"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"c6834dd0-b926-4cc3-bfe1-2efe72f755ac","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-02T02:57:38Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-8ebfbddc5b9e72cab170d3a1867c1660-pod namespace=chains-e2e-kscf operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=85e5526b-aa08-44e4-ab8d-33d8b0cc0c5c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8d93c68-9ab2-4df7-9ba2-696ee156c3ad"],"authentication.kubernetes.io/node-name":["ip-10-0-171-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["81b1e7d0-3412-4a89-9c42-4ba137475457"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["a67e5fd3-c841-4501-bf1e-d5d3b9c03f63"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:57:38Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-8ebfbddc5b9e72cab170d3a1867c1660-pod namespace=chains-e2e-kscf operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=07df51db-fcda-47a6-98b7-bbd9b767bfd2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8d93c68-9ab2-4df7-9ba2-696ee156c3ad"],"authentication.kubernetes.io/node-name":["ip-10-0-171-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["81b1e7d0-3412-4a89-9c42-4ba137475457"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["a67e5fd3-c841-4501-bf1e-d5d3b9c03f63"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:57:38Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-8ebfbddc5b9e72cab170d3a1867c1660-pod namespace=chains-e2e-kscf operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kscf/Pod/verify-enterprise-contract-8ebfbddc5b9e72cab170d3a1867c1660-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=eacc86fe-fd38-4783-a3f3-ca0e46605e24 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8d93c68-9ab2-4df7-9ba2-696ee156c3ad"],"authentication.kubernetes.io/node-name":["ip-10-0-171-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["81b1e7d0-3412-4a89-9c42-4ba137475457"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["a67e5fd3-c841-4501-bf1e-d5d3b9c03f63"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:57:53Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-90cbdc983eef30afd819642048f8a8fd-pod namespace=chains-e2e-kscf operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=915ff909-1fda-4b83-8c83-c0cae2f296ae user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8d93c68-9ab2-4df7-9ba2-696ee156c3ad"],"authentication.kubernetes.io/node-name":["ip-10-0-171-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["81b1e7d0-3412-4a89-9c42-4ba137475457"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["a67e5fd3-c841-4501-bf1e-d5d3b9c03f63"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:57:53Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-90cbdc983eef30afd819642048f8a8fd-pod namespace=chains-e2e-kscf operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=e911e2f8-c484-4fc5-9b76-5d98f3e03848 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8d93c68-9ab2-4df7-9ba2-696ee156c3ad"],"authentication.kubernetes.io/node-name":["ip-10-0-171-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["81b1e7d0-3412-4a89-9c42-4ba137475457"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["a67e5fd3-c841-4501-bf1e-d5d3b9c03f63"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:57:53Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-90cbdc983eef30afd819642048f8a8fd-pod namespace=chains-e2e-kscf operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kscf/Pod/verify-enterprise-contract-90cbdc983eef30afd819642048f8a8fd-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=567502e3-6df0-4924-b989-e3853f478c42 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8d93c68-9ab2-4df7-9ba2-696ee156c3ad"],"authentication.kubernetes.io/node-name":["ip-10-0-171-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["81b1e7d0-3412-4a89-9c42-4ba137475457"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["a67e5fd3-c841-4501-bf1e-d5d3b9c03f63"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:58:13Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-edb94238f08140911099504c70f6f84b-pod namespace=chains-e2e-kscf operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=bca1cfc0-1c37-429a-975f-00ae0594cff1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=49b43665-9283-480a-a242-baa09350cbd1"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dbede71c-6d1e-4eef-b90f-c8ed081d1c98"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:58:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=24cd4f2f-8128-41b7-b2d3-a15cf3b35cf3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:58:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=fe7134b5-ccc1-455a-8659-0f5abe6ef1e6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:58:13Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-edb94238f08140911099504c70f6f84b-pod namespace=chains-e2e-kscf operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=956fce85-305f-444d-a33e-8fb62cd807d2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=49b43665-9283-480a-a242-baa09350cbd1"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dbede71c-6d1e-4eef-b90f-c8ed081d1c98"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:58:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=7952ddcd-7c6d-43bb-b889-31f21c196dc0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:58:13Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-edb94238f08140911099504c70f6f84b-pod namespace=chains-e2e-kscf operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kscf/Pod/verify-enterprise-contract-edb94238f08140911099504c70f6f84b-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=be8170e7-fed3-4e5f-a98c-fc6e48348830 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=49b43665-9283-480a-a242-baa09350cbd1"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dbede71c-6d1e-4eef-b90f-c8ed081d1c98"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:58:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=2603949c-2da8-4f8f-aebd-035889bba9e2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:58:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=e7142ee9-c1dd-4dc9-893e-686c61fbf4af user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:58:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=09089123-7a59-445b-b60a-a8b49456702a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:58:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=d66347cb-c262-4cf8-8bbf-929f3e790e5b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:58:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=3e15d51f-2700-4ea8-aa6c-000b075952aa user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:58:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=91110e9e-58c9-41fd-8645-2bf6789d2e33 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:58:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=6fd539cd-4dc2-46a9-8fd0-ce25268441a6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:58:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=6a88e81a-16de-48c9-9481-db9fcfb7659d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:58:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=324b33b1-f9ae-4c54-b15f-96523c3f036f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:58:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=11c279ad-30cb-4257-b0cf-05d2e1e4b1e5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:58:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=ff822b08-8292-45f4-9525-921ccc8aee70 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:58:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=5c3a4288-8c6c-4e76-aa29-7a34f29c568d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d5effb2-9567-4715-abe3-29b2c6f6629e"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["16a35bee-4da1-488c-99d9-c9dbf3da2db9"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"320f1a20-41e1-4a98-ba6c-398705c47d5c","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:58:25Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-79ca714d6d4124f2fc15be459db18e6b-pod namespace=chains-e2e-kscf operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=618a8601-4ce3-4d1f-8243-a77cfd24d909 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8d93c68-9ab2-4df7-9ba2-696ee156c3ad"],"authentication.kubernetes.io/node-name":["ip-10-0-171-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["81b1e7d0-3412-4a89-9c42-4ba137475457"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["a67e5fd3-c841-4501-bf1e-d5d3b9c03f63"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:58:26Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-79ca714d6d4124f2fc15be459db18e6b-pod namespace=chains-e2e-kscf operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=ae866818-7f07-45b0-8c8d-beedd4aff60f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8d93c68-9ab2-4df7-9ba2-696ee156c3ad"],"authentication.kubernetes.io/node-name":["ip-10-0-171-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["81b1e7d0-3412-4a89-9c42-4ba137475457"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["a67e5fd3-c841-4501-bf1e-d5d3b9c03f63"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:58:26Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-79ca714d6d4124f2fc15be459db18e6b-pod namespace=chains-e2e-kscf operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kscf/Pod/verify-enterprise-contract-79ca714d6d4124f2fc15be459db18e6b-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=7999ee6b-9b20-475a-9dfb-8856fc11e299 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8d93c68-9ab2-4df7-9ba2-696ee156c3ad"],"authentication.kubernetes.io/node-name":["ip-10-0-171-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["81b1e7d0-3412-4a89-9c42-4ba137475457"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["a67e5fd3-c841-4501-bf1e-d5d3b9c03f63"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:58:41Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-8ae8980657f67f1a7fb238538fc4b263-pod namespace=chains-e2e-kscf operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=5275d6f0-a456-44d3-a1e4-34e3e68a0331 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=49b43665-9283-480a-a242-baa09350cbd1"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dbede71c-6d1e-4eef-b90f-c8ed081d1c98"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:58:41Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-8ae8980657f67f1a7fb238538fc4b263-pod namespace=chains-e2e-kscf operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=97e829ff-32aa-402f-987e-3188282532db user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=49b43665-9283-480a-a242-baa09350cbd1"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dbede71c-6d1e-4eef-b90f-c8ed081d1c98"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:58:41Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-8ae8980657f67f1a7fb238538fc4b263-pod namespace=chains-e2e-kscf operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kscf/Pod/verify-enterprise-contract-8ae8980657f67f1a7fb238538fc4b263-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=aaf7da6a-80f2-4b42-a2fa-2b02ceec481e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=49b43665-9283-480a-a242-baa09350cbd1"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dbede71c-6d1e-4eef-b90f-c8ed081d1c98"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:59:08Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-fe0cceb6f0109f6a7a4fc85da5a26bcb-pod namespace=chains-e2e-kscf operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=23ad431e-102c-46fd-b130-1dbedf45406d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8d93c68-9ab2-4df7-9ba2-696ee156c3ad"],"authentication.kubernetes.io/node-name":["ip-10-0-171-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["81b1e7d0-3412-4a89-9c42-4ba137475457"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["a67e5fd3-c841-4501-bf1e-d5d3b9c03f63"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:59:08Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-fe0cceb6f0109f6a7a4fc85da5a26bcb-pod namespace=chains-e2e-kscf operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=7abdc9ac-172b-4f7e-877d-c1c31db2eddd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8d93c68-9ab2-4df7-9ba2-696ee156c3ad"],"authentication.kubernetes.io/node-name":["ip-10-0-171-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["81b1e7d0-3412-4a89-9c42-4ba137475457"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["a67e5fd3-c841-4501-bf1e-d5d3b9c03f63"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:59:08Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-fe0cceb6f0109f6a7a4fc85da5a26bcb-pod namespace=chains-e2e-kscf operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kscf/Pod/verify-enterprise-contract-fe0cceb6f0109f6a7a4fc85da5a26bcb-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=b0887fe1-14a7-460d-a014-732c79516d49 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8d93c68-9ab2-4df7-9ba2-696ee156c3ad"],"authentication.kubernetes.io/node-name":["ip-10-0-171-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["81b1e7d0-3412-4a89-9c42-4ba137475457"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["a67e5fd3-c841-4501-bf1e-d5d3b9c03f63"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:59:33Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-9ae86b58b5fb7ba71435a7bb9635e09f-pod namespace=chains-e2e-kscf operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=032aeb35-8b6a-4946-a47b-50ae598d300d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=49b43665-9283-480a-a242-baa09350cbd1"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dbede71c-6d1e-4eef-b90f-c8ed081d1c98"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:59:33Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-9ae86b58b5fb7ba71435a7bb9635e09f-pod namespace=chains-e2e-kscf operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=806584e2-2604-4eed-a7c4-45523ef4553a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=49b43665-9283-480a-a242-baa09350cbd1"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dbede71c-6d1e-4eef-b90f-c8ed081d1c98"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:59:33Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-9ae86b58b5fb7ba71435a7bb9635e09f-pod namespace=chains-e2e-kscf operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kscf/Pod/verify-enterprise-contract-9ae86b58b5fb7ba71435a7bb9635e09f-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=c99b49af-d1a1-4ede-9544-d90f01c44985 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=49b43665-9283-480a-a242-baa09350cbd1"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dbede71c-6d1e-4eef-b90f-c8ed081d1c98"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:59:48Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-1db4df0a6e5433cd29d4ad1b603fc0d8-pod namespace=chains-e2e-kscf operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=28ab627c-9b4a-4cc2-b23c-cac7ad4f781b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=49b43665-9283-480a-a242-baa09350cbd1"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dbede71c-6d1e-4eef-b90f-c8ed081d1c98"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:59:48Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-1db4df0a6e5433cd29d4ad1b603fc0d8-pod namespace=chains-e2e-kscf operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=9e0875af-6e94-487d-b614-aa3b9fa8e7df user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=49b43665-9283-480a-a242-baa09350cbd1"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dbede71c-6d1e-4eef-b90f-c8ed081d1c98"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:59:48Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-1db4df0a6e5433cd29d4ad1b603fc0d8-pod namespace=chains-e2e-kscf operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kscf/Pod/verify-enterprise-contract-1db4df0a6e5433cd29d4ad1b603fc0d8-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=5a1945db-2733-47e7-b9d8-76042a7da608 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=49b43665-9283-480a-a242-baa09350cbd1"],"authentication.kubernetes.io/node-name":["ip-10-0-133-218.ec2.internal"],"authentication.kubernetes.io/node-uid":["2c4a5cfb-2bfd-4cc8-835a-09cb0644078c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dbede71c-6d1e-4eef-b90f-c8ed081d1c98"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c3678948-d7c6-4d52-a17e-d10914423d85","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T03:00:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29848500 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29848500 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=5118587d-fb52-46d9-9e9b-dca0f2de3144 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bcb2b29a-42af-4f67-97cc-536a75b56e2a"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"e4dc6253-3e7a-43e0-8bd1-b7d59eac096f","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-02T03:00:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=image-controller-notification-resetter-cronjob-29848500 namespace=image-controller operation=CREATE policy=restrict-docker-io-images resource=image-controller/Job/image-controller-notification-resetter-cronjob-29848500 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=613679ed-2f6d-4372-b1a7-4eb7dcc0c15b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bcb2b29a-42af-4f67-97cc-536a75b56e2a"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"e4dc6253-3e7a-43e0-8bd1-b7d59eac096f","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-02T03:00:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29848500 namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Job/osd-delete-backplane-serviceaccounts-29848500 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=328ea27d-7905-48de-a5a5-9676f8b07206 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bcb2b29a-42af-4f67-97cc-536a75b56e2a"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"e4dc6253-3e7a-43e0-8bd1-b7d59eac096f","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-02T03:00:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29848500-fznmm namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29848500-fznmm resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=a1ae43d7-11b0-49b7-830c-c140b6b0ff19 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ba5dfe4-9873-4a16-a953-6f076a67030e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"7c737f71-3608-4970-99a4-d72850ed4fdb","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-02T03:00:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=image-controller-notification-resetter-cronjob-29848500-g2fq7 namespace=image-controller operation=CREATE policy=restrict-docker-io-images resource=image-controller/Pod/image-controller-notification-resetter-cronjob-29848500-g2fq7 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=478f6507-b0a2-4346-af54-a8f616c7389e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ba5dfe4-9873-4a16-a953-6f076a67030e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"7c737f71-3608-4970-99a4-d72850ed4fdb","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-02T03:00:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29848500-mrj9n namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Pod/osd-delete-backplane-serviceaccounts-29848500-mrj9n resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=dae77ade-b8f0-47ee-9083-d1746a2d2415 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ba5dfe4-9873-4a16-a953-6f076a67030e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"7c737f71-3608-4970-99a4-d72850ed4fdb","username":"system:serviceaccount:kube-system:job-controller"} v=2