2026-09-30T02:04:51Z TRC kyverno/pkg/version/version.go:49 > version hash=--- logger=setup/version v=2 version=1.26.5
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > add_dir_header=false logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > admissionReports=false logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > allowHTTPInNamespacedPolicies= logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > allowInsecureRegistry=false logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > allowedResults=pass,fail,error,warn,skip logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderr=false logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderrthreshold=0 logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > apiCallTimeout=30s logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitEnabled=true logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitRatio=0.9 logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > autoUpdateWebhooks=true logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > backgroundServiceAccountName=system:serviceaccount:konflux-kyverno:kyverno-background-controller logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > caSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-ca logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerHost= logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerPort=9443 logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitBurst=200 logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitQPS=100 logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > controllerRuntimeMetricsAddress=:8080 logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > crdWatcher=false logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > disableCertManagerController=false logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > disableLogColor=false logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > disableMetrics=false logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > dumpPatches= logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > dumpPayload=false logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > enableConfigMapCaching=true logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > enableCosignLogging=false logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > enableDeferredLoading= logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > enablePolicyException=false logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > enableReporting= logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > enableTracing=false logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > enableTuf=false logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitBurst=2000 logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitQPS=1000 logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > exceptionNamespace= logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > excludeBootstrapResources=false logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > exemplarFilter=trace-based logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > forceFailurePolicyIgnore= logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > generateMutatingAdmissionPolicy= logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > generateValidatingAdmissionPolicy= logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > httpAllowlist= logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > httpBlocklist= logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > imagePullSecrets= logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheEnabled=true logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheMaxSize=1000 logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheTTLDuration=1h0m0s logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > kubeconfig= logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > leaderElectionRetryPeriod=26s logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > legacy_stderr_threshold_behavior=true logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > log_backtrace_at=:0 logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > log_dir= logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > log_file= logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > log_file_max_size=1800 logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingFormat=text v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingtsFormat=default v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag logtostderr=true v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAPICallResponseLength=2000000 v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAdmissionReports=1000 v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditCapacity=1000 v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditWorkers=8 v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxGlobalContextEntries=0 v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxQueuedEvents=1000 v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsCASecretName= v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsHost= v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsKeyAlgorithm=RSA v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsPort=8000 v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsRenewBefore=360h0m0s v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsServerIP= v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsTLSSecretName= v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag omitEvents=PolicyApplied,PolicySkipped v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag one_output=false v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelCollector=opentelemetrycollector.kyverno.svc.cluster.local v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelConfig=prometheus v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profile=false v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profileAddress= v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profilePort=6060 v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag protectManagedResources= v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag registryCredentialHelpers=default,google,amazon,azure,github v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag renewBefore=360h0m0s v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag reportsServiceAccountName= v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag resyncPeriod=15m0s v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag serverIP= v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag servicePort=443 v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_headers=false v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_log_headers=false v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag stderrthreshold=2 v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsKeyAlgorithm=RSA v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-pair v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingAddress= v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingCreds= v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingPort=4317 v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag transportCreds= v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufMirror=https://tuf-repo-cdn.sigstore.dev v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRoot= v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRootRaw= v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 vmodule=
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookRegistrationTimeout=2m0s
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerHost=
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerPort=9443
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookTimeout=10
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/maxprocs.go:12 > setup maxprocs... logger=setup/maxprocs v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/memlimit.go:13 > setup memlimit... logger=setup/memlimit ratio=0.9 v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/signal.go:16 > setup signals... logger=setup/signals v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-09-30T02:04:51Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowCARotation logger=klog v=1
2026-09-30T02:04:51Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformers logger=klog v=1
2026-09-30T02:04:51Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=WatchListClient logger=klog v=1
2026-09-30T02:04:51Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=UnlockWhileProcessingFIFO logger=klog v=1
2026-09-30T02:04:51Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=AtomicFIFO logger=klog v=1
2026-09-30T02:04:51Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowTLSCacheGC logger=klog v=1
2026-09-30T02:04:51Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsAllowCBOR logger=klog v=1
2026-09-30T02:04:51Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsPreferCBOR logger=klog v=1
2026-09-30T02:04:51Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformersBatchProcess logger=klog v=1
2026-09-30T02:04:51Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InformerResourceVersion logger=klog v=1
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/configmap.go:36 > create metrics-config-controller... logger=setup/metrics-config-controller v=2
2026-09-30T02:04:51Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/configmap.go:52 > done creating metrics-config-controller logger=setup/metrics-config-controller v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/metrics.go:27 > setup metrics... collector=opentelemetrycollector.kyverno.svc.cluster.local creds= exemplarFilter=trace-based logger=setup/metrics otel=prometheus port=8000 tlsSecretName= v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/configmap.go:15 > create config-controller... logger=setup/config-controller v=2
2026-09-30T02:04:51Z INF kyverno/cmd/internal/metrics.go:159 > Starting HTTP metrics server address=[]:8000 logger=setup/metrics v=0
2026-09-30T02:04:51Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/config/config.go:433 > defaultRegistry configured defaultRegistry=docker.io logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/config/config.go:449 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/config/config.go:458 > excludedGroups configured excludeGroups=["system:nodes"] includeGroups=[] logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/config/config.go:463 > excludeUsernames not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/config/config.go:471 > excludeRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/config/config.go:479 > excludeClusterRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/config/config.go:495 > generateSuccessEvents configured generateSuccessEvents=false logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/config/config.go:501 > successEventActions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/config/config.go:525 > webhooks configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhooks="{\"namespaceSelector\":{\"matchExpressions\":[{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"kube-system\"]},{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"konflux-kyverno\"]}],\"matchLabels\":null}}"
2026-09-30T02:04:51Z TRC kyverno/pkg/config/config.go:539 > webhookAnnotations configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhookAnnotations="{\"admissions.enforcer/disabled\":\"true\"}"
2026-09-30T02:04:51Z TRC kyverno/pkg/config/config.go:545 > webhookLabels not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/config/config.go:559 > matchConditions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/config/config.go:580 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/config/config.go:595 > maxContextSize not set, using default default=2097152 logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/configmap.go:31 > done creating config-controller logger=setup/config-controller v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/registry.go:18 > setup registry client... insecure=false logger=setup/registry-client secrets= v=2
2026-09-30T02:04:51Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/imageverifycache.go:10 > setup image verify cache... enabled=true logger=setup/image-verify-cache maxsize=1000 ttl=1h0m0s v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/client.go:60 > create kyverno client... burst=200 kubeconfig= logger=setup/kyverno-client qps=100 v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/client.go:68 > create dynamic client... burst=200 kubeconfig= logger=setup/dynamic-client qps=100 v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/client.go:84 > create apiserver client... burst=200 kubeconfig= logger=setup/apiserver-client qps=100 v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/client.go:76 > create metadata client... burst=200 kubeconfig= logger=setup/metadata-client qps=100 v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/client.go:92 > create the kyverno dynamic client... burst=200 kubeconfig= logger=setup/d-client qps=100 v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/client.go:100 > create the events client... burst=200 kubeconfig= logger=setup/events-client qps=100 v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/events-client/kube-client qps=100 v=2
2026-09-30T02:04:51Z TRC kyverno/cmd/internal/reporting.go:13 > setting up reporting... enableReporting= generate=false imageVerify=false logger=setup/setup-reporting mutate=false mutateExisiting=false v=2 validate=false
2026-09-30T02:04:51Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-09-30T02:04:51Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-09-30T02:04:51Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-09-30T02:04:52Z TRC kyverno/cmd/internal/engine.go:62 > setup exception selector... enablePolicyException=false exceptionNamespace= logger=setup/exception-selector v=2
2026-09-30T02:04:52Z TRC kyverno/cmd/internal/engine.go:91 > setup config map resolver... enableConfigMapCaching=true logger=setup/configmap-resolver v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-09-30T02:04:52Z TRC kyverno/cmd/internal/engine.go:44 > setup engine... logger=setup/engine v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterPolicy v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Policy v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2beta1.GlobalContextEntry v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.UpdateRequest v=2
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:208 > Starting metrics server logger=controller-runtime/metrics v=0
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:247 > Serving metrics server bindAddress=:8080 logger=controller-runtime/metrics secure=false v=0
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy source="kind source: *v1beta1.NamespacedMutatingPolicy" v=0
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy source="kind source: *v1beta1.ValidatingPolicy" v=0
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy source="kind source: *v1beta1.NamespacedValidatingPolicy" v=0
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy source="kind source: *v1beta1.NamespacedImageValidatingPolicy" v=0
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy source="kind source: *v1beta1.ImageValidatingPolicy" v=0
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy source="kind source: *v1beta1.MutatingPolicy" v=0
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.PolicyException v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.GeneratingPolicy v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedGeneratingPolicy v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Namespace v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRoleBinding v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.RoleBinding v=2
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:258 > Attempting to acquire leader lease... lock=konflux-kyverno/kyverno logger=klog v=0
2026-09-30T02:04:52Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=kyverno-events v=2 workers=3
2026-09-30T02:04:52Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=global-context v=2 workers=1
2026-09-30T02:04:52Z TRC kyverno/pkg/event/controller.go:125 > start logger=EventGenerator v=2
2026-09-30T02:04:52Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/controllers name=policycache-controller v=2 workers=3
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:272 > Successfully acquired lease lock=konflux-kyverno/kyverno logger=klog v=0
2026-09-30T02:04:52Z TRC kyverno/pkg/leaderelection/leaderelection.go:82 > started leading id=kyverno-admission-controller-576ff55549-8vvtb logger=setup/leader-election v=2
2026-09-30T02:04:52Z TRC kyverno/cmd/kyverno/main.go:335 > MutatingAdmissionPolicy API is not registered, skipping MAP informers error="mutating admission policy API is not registered" v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Lease v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.MutatingWebhookConfiguration v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicyBinding v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.PolicyException v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicy v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingWebhookConfiguration v=2
2026-09-30T02:04:52Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRole v=2
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0 worker count=1
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0 worker count=1
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0 worker count=1
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0 worker count=1
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0 worker count=1
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0
2026-09-30T02:04:52Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0 worker count=1
2026-09-30T02:04:52Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=webhook-controller v=2 workers=2
2026-09-30T02:04:52Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=celexception-webhook-controller v=2 workers=1
2026-09-30T02:04:52Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=status-controller v=2 workers=3
2026-09-30T02:04:52Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=global-context-webhook-controller v=2 workers=1
2026-09-30T02:04:52Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=exception-webhook-controller v=2 workers=1
2026-09-30T02:04:52Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=admissionpolicy-generator v=2 workers=2
2026-09-30T02:04:52Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=certmanager-controller v=2 workers=1
2026-09-30T02:04:52Z TRC kyverno/pkg/utils/controller/run.go:20 > starting ... logger=admissionpolicy-generator v=2
2026-09-30T02:04:52Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-09-30T02:04:52Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-09-30T02:04:52Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-09-30T02:04:52Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-09-30T02:10:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=CREATE uid=df5d2a19-2f42-4d18-83e4-600d58690fdd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=CREATE uid=1f91e8ad-74be-4cd1-a89e-a629841aa061 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring type=ClusterPolicy v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring uid=977f98f6-e09b-434b-8f3b-54cb5cf68624 v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=CREATE uid=48b70c03-ef7b-4330-a798-2bab6408b2b4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-integration type=ClusterPolicy v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-integration uid=3b56ce4c-152c-456d-8efa-ee479f403ba7 v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-generate-konflux-viewer-access type=ClusterPolicy v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-generate-konflux-viewer-access uid=9dc4587d-d9dd-433c-9cfe-e19cc5f014b1 v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=CREATE uid=7a0dc5a5-8e8c-4037-87d0-3701ee1deffd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=CREATE uid=19b2d4ce-a270-4782-8d92-161265239f42 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=CREATE uid=31ccb3f6-962e-4bf6-b83c-d273b04fea04 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace uid=1777464b-5da6-45be-8d9b-cd690d623b71 v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace type=ClusterPolicy v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-rbcm type=ClusterPolicy v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-rbcm uid=d2ab5b6d-c417-4335-b7c3-0b87051dcd7a v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=CREATE uid=01e0f0c9-9fae-44f4-9b6e-81001bfa8d5a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole type=ClusterPolicy v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole uid=964eee2e-3c0a-4e63-8159-6e52a15aa68e v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress uid=337d0bf0-b46f-4c05-8876-1abfcd531f8f v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress type=ClusterPolicy v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=CREATE uid=4ae31eae-deb4-45ce-87b8-65ba5b2c7d68 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=CREATE uid=6a232557-382b-4c76-80b2-f20db80444bd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-olm uid=723a34fb-52ed-4c1c-a79e-87663e1e2926 v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-olm type=ClusterPolicy v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-kubearchiveconfig uid=f606bcd3-9006-4de9-bab7-3714a27df9a7 v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-kubearchiveconfig type=ClusterPolicy v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=CREATE uid=6342bdf6-dd89-4758-a31b-26e078e79293 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=CREATE uid=b505abd5-0c0d-47d8-b322-9f35bf633857 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-system-authenticated type=ClusterPolicy v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-system-authenticated uid=c709a26f-42cc-4e82-94f3-bc301bb0f02d v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-sysauth-releng type=ClusterPolicy v=2
2026-09-30T02:10:35Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-sysauth-releng uid=f25c5e82-3502-4478-a20a-611b35aa5cbb v=2
2026-09-30T02:10:35Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-system-authenticated\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-system-authenticated status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-09-30T02:10:35Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-sysauth-releng\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-sysauth-releng status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-09-30T02:10:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=CREATE uid=7d9fb6c8-c38d-48d2-8419-4d3b4f0270b8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:36Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=tekton-taskrun-resource-policy type=ClusterPolicy v=2
2026-09-30T02:10:36Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=tekton-taskrun-resource-policy uid=b6fd37ae-ca21-4714-98ec-f639a4e84721 v=2
2026-09-30T02:10:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=CREATE uid=d282d221-1d66-4e65-9f8b-d676dcc27351 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=CREATE uid=2702dc23-f9bd-4017-bc38-2930664161d5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:36Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-binding-system-groups uid=e8cf3337-1b5e-4041-b55f-10697cd6047d v=2
2026-09-30T02:10:36Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-binding-system-groups type=ClusterPolicy v=2
2026-09-30T02:10:36Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-docker-io-images uid=90c99e04-fcf5-4bcb-8f65-53283c318de7 v=2
2026-09-30T02:10:36Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-docker-io-images type=ClusterPolicy v=2
2026-09-30T02:10:36Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-binding-system-groups\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-binding-system-groups status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-09-30T02:10:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=a699053b-1a61-4955-ae38-23d59224a86d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=e196b352-28c1-4f7e-907f-25b9dffc7608 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=45d353a5-10db-4e23-9040-65bd84a8fe5f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=14532232-aefb-4997-b159-6e674cf1a6b3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=d9f0a826-f78c-47a4-9e2c-84ab5b36abfb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=d05fad71-d468-4fc2-a445-64930f3dc905 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=2e304f1c-d543-4c0c-a9d0-495a4ed983fd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=f05f705a-8ae1-4cc6-9a69-1485f12943b3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=5196d696-03fe-4cab-ab2c-f44da696f036 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=4136ac03-b2d6-4330-887c-dd89ef6306e0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=ca115572-1323-4363-b1cf-ca4b5f067f85 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=f72c8a69-9e8c-4af3-94b2-29ef9fe4debe user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=21b02e0f-8259-4d0a-9209-f84f4d308d86 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=9f927fa6-3a2a-4ca1-8d29-9da38f8e2870 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=eeed3f07-84a2-4a62-9c7e-d62c41d5ddb5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=f0f49b39-6a3b-4c7c-b7b1-02f177425cbd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=7b30e75f-f819-487d-a2a5-b9c1aeeae142 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=298f14ae-6c12-48dd-a65b-4f58a9fe1224 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=2e627008-466f-4c71-a84e-f6d08665b0fb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=e1c41dfa-5038-4635-b003-3930edc520e1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=fb19469a-dace-4e2c-8f7b-17ece3999423 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=dc8aa895-494b-4921-aac2-971aa20f02b8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=672a552b-c444-4a2e-8fed-8a3e637e8b29 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=467beac2-f055-4ae7-ab0c-20f437d6b054 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=c67539a2-415c-4a36-be0e-fb03bde2cf66 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=1b221497-2949-4794-8e7a-58c2dcd19abc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=1df0b5dd-681f-450d-b668-105fe2925afc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=0247cd3e-5ec5-42ca-bb9e-a9502dd07c78 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=5838d774-ab72-4495-89ff-44a47b87230b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=892ef7ea-56c2-4cf2-8afe-747b28824d33 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=b98b4154-a4f6-4ff4-8bc4-c6198438a5d1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=e022f2d9-4da1-4540-854a-648598ce1444 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=1b8113b9-c062-4c32-b649-a5b007b1dad0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=003846cb-cc1e-4ce1-8099-fe04e5351b14 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:41Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=bb8e4b0f-15d9-4334-9fe9-35c4be353079 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=e5423a2e-dc70-460d-8cd4-21f660f93fa8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=908cfa21-5240-4a1f-9c9a-a1ffd9720a0e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=48584200-1895-4670-8991-7ce1290fb2a7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=68772727-50d1-49b0-94be-dc777554ad7d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=4efa7d74-485c-4cc5-8312-a206ac8c237a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=5479cc05-a810-486a-8af3-5e796acf6b78 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=6533951c-5948-4b4c-b57c-e71788646d4e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=5f2e0bcf-44f4-4268-aba9-a3329534769d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=3e8ace5e-d9a7-45fe-9411-2ca4f07a2b4d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=e0c801d9-804b-4cdd-93c4-f24d8996fc9c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=4b76039f-7ce8-456e-95c4-b25e7c0534d3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=dc285e1a-9169-4ee8-b643-a192631d0d36 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=0034b7e2-3d4e-4d8d-8597-ae10c02904dd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=34f80a8a-ceab-4e38-88f2-a83ff4a2fd26 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=115bd050-b472-43b2-9116-79aa4ff6c25a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=8c760ad4-304b-4b17-a6f9-de974da252e8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=43098a36-1442-4ef5-86d0-c88d1f592e9a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=99f732d1-982d-40b1-98b7-78727e55bbd9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=f7fc8692-c32e-4916-b609-62208c837767 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=74951b54-1862-4fe8-8c2c-e7b0147fd9b0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=bba73efa-0255-4fab-acae-74b30c72ad64 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=d790db3a-5a8f-49cf-a545-fcdb443b06d8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=81da18dc-f14b-4c31-b6a2-d208404cd3c9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=d9e65a2b-98dc-4777-8bdc-7a3523c5d05c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=a0d24863-ae16-421c-8ddc-a5eb4612cd55 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=f73f9347-d30f-49ef-8ab5-c0604cdd4722 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=2e3ffae6-a2cd-498b-927f-4ad8f19db276 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=5c7f051b-98f3-4140-af0b-02af36e3a47a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=5ed96537-c07e-472f-8ad6-fb87cef706a3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=1c17fd8e-ca38-4083-8e10-4389873a701c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=ec3a5a2e-947b-484c-9596-a3f4ca47ca91 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=088cd62f-556f-47ee-aaed-b50f2893766d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=9e4e25b1-4a70-459c-9dbf-0837d7500be1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=7da8d02d-fe15-4bdf-90d3-defd0fc08509 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=a3725915-c6bd-49ad-b33a-f23228784803 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=0aea0915-511b-4c4d-a654-61b36420820d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=ceb5b2c6-452b-488c-9205-908e9d0c7781 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=1f6dcc79-4627-4bcb-9102-954253ceebd8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=4bf52c37-a26d-4688-8940-7338484b06f0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=4f39577c-369c-47d5-950f-477edbc93d5f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=937c9447-b3f9-4f1d-88ea-22cfed14d68f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=fcea9540-f60e-4e99-9d7f-8bd7667749c6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=5b961019-81cb-48be-837a-1783e8210088 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=f94fd420-3a29-4d61-96d0-e662f8535342 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=6ac9fc9b-96c2-46e0-a711-60e4e92da482 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=9982cefb-3c23-49f8-bc87-56de9fc22c5b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=b36bc110-a772-4475-b037-0853d5d4b786 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=2b43d139-2683-4920-9b03-cc2932c42b8f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=7ed6a8a1-b0f2-4d7d-8a31-9873bed189bb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=9e002c1d-25b5-4b66-b236-58d5a60772a2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=009c9f5f-83ed-4ea2-a565-9e88adc6851e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=b90897d9-caab-427b-903c-761dd147ac15 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=0dabc071-bd93-4ed5-a0bd-15f6a1859683 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=752d50e4-c34d-4e9e-99e3-162be4524b43 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=579c9c50-31f1-40a2-84fd-8e7650e9dcac user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=7e617d7f-bbe9-40bc-8c46-f75d10720590 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=58be9d17-a2de-4948-bfaa-9b212f094252 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=0dc3715b-598d-41a0-b92f-fd48128b89a2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=b3dc9ccc-6e71-4c9f-9a65-9217bf9eeb65 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=dd798dba-e8a9-42b7-ac73-8fcb6a1c55cd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=671025f5-2b85-4dc9-954c-69f664906750 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=46565498-07b0-4536-8748-ea4e18d122ef user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=b9007340-7397-41ee-a941-afa3a46f3f1a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=2dc0e749-5070-45d3-8ff1-02caa64cae74 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=ba7060f4-b723-466d-a435-c47ab9a9317f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=4bd6aa27-d4a8-4e57-a73e-0afee7f2c717 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=3eb0644c-495b-469d-9bcc-949c0235d947 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=acfa27b1-2b9e-4596-8fed-71ea2b195bca user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=5d8e2315-831d-4f5f-94e8-57c53742cb85 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=d37273b8-8102-44dc-9d86-a383728a69d8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=e424bb74-fe35-4eee-9636-2a91851469ab user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=ca565e5d-27cd-4d89-a03d-3c9bed637b2e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=359b6b5f-aae7-4822-8b98-e04f40ff6bac user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=5c65a68c-1061-4347-903c-8e704d78ff42 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=504d1123-82b4-4a61-a480-751d54b53fa4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=819ab147-5909-49c9-8da0-acc56684b434 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=7ba30f25-3e37-4b3a-bdbc-fa6bb8c9bc63 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=4d05ea15-3599-48ce-b970-0a2b4e3579a7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=ea0ded8e-e374-4d2b-aa11-0e30290bf9d1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=b778ffbc-17f2-4591-ba91-85a96743c091 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=38dfbc32-40e1-4dd2-8e01-9d7027eb1836 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=bcbbca5d-8dcd-4ff2-ab22-dddf740d0dfe user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=741d7739-b909-4437-b0ae-c82006978336 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=3c9f60ad-319b-417e-b617-bd2da8b3dad6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=e8007fdf-98f2-4d63-b619-41117c3fa1ad user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=bd8fcc06-05e6-4ec2-9975-9887e613fd9d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=90504235-56b5-4428-a81d-e5763d9552f2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=a2b88235-16fb-49c8-851a-430a18270bff user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=87de51c9-f237-46da-a3aa-75d14c589194 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=154b70e6-8811-4daa-a1b4-2e4213e7e918 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=bde154fd-f4b5-40e7-8c19-b080f7b97df9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=277990a1-11d1-4f94-b8cb-7f94cd111599 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=4465c149-e35e-4bab-bc7d-5265c7f61f55 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=9f529cc5-33a2-43dc-90ad-93728e0c8fc9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=aae24708-971b-4c77-a4ff-a8f36563c23e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=ea05175e-cbe7-4953-a90a-2ac4224ea46c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=3a82ef7c-8071-4d7f-8dc9-288f8df54c1e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=f20bb398-2a14-451f-8f2b-c16b42a3f00a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=eb15e5db-f3b8-413a-b8ba-6d02e4612f62 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=41d8888c-3b63-4c12-9774-3113fe04d2d7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=349ea631-51ca-4644-9e5e-8253ffe7910c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=5ca3ae23-cb17-4453-9738-667bdc25f7c7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=41eb6728-e6ef-4b70-b06a-c7fe71bcf472 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=a041e05f-1dd2-472e-b83e-85daf75fa30d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=5ad74dd3-b88b-4f69-991c-d70a0a097a83 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=774a4e5f-8ba8-47db-91c4-e8b0c6a8a964 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=411debb6-7f4a-45b2-a7c9-1669659c8430 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=5b83f9b3-2c22-43c9-86fb-a18b7fb0d35f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=2b60ef3b-e0d8-46d6-acae-cff75284d3ad user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=78f9fe96-906f-4573-81f2-de75cc006c20 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:24Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-project-controller","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=create-minio-bucket namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Job/create-minio-bucket resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=a5becffc-c8fa-43a8-b7c2-3ea8e6e2d4e6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:24Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-project-controller","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=tekton-chains-signing-secret namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Job/tekton-chains-signing-secret resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=fbebda31-275c-4399-a140-5215784f0950 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:24Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-chains-signing-secret-6dt4j namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-chains-signing-secret-6dt4j resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=2760bb35-4385-48dc-9cd4-d0413cb39d11 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=55e6a4ad-923a-43d2-bb27-0e0341425477"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"9061a2f3-ec1d-4835-9358-c4620cd8700c","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-09-30T02:11:24Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=create-minio-bucket-2rmhh namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/create-minio-bucket-2rmhh resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=e21f80e9-b6af-45aa-97f1-b3c64198d8f4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=55e6a4ad-923a-43d2-bb27-0e0341425477"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"9061a2f3-ec1d-4835-9358-c4620cd8700c","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-09-30T02:11:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=ee83c666-403d-424e-9449-26c7e6eea290 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=349b04a1-581e-4158-a7af-735c87114fbe user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=1c9d5d4c-1211-4a16-92b7-fdf6e43ce8ad user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=edfc53f4-6285-42f6-b131-b2d2d18f3e15 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=e0e2e730-ffc5-4aca-88f0-ea7dfc6e06c0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=71dbf3c4-0145-4f53-aa28-f90f39da7864 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=4464db34-3c85-4db0-8ed5-de5d35039aa3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=5716fd34-8726-494e-b527-488121269bb7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=1b44dbcb-5cd1-4a3d-b163-7e5b6c0c6703 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=7305dd42-d421-4a4a-a994-a0148170c2c7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=61387e8c-d186-48e8-bd7f-13bd64235c69 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=2ee1a1b2-106c-47dc-996d-3ff04e3cedc7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=59545fd1-e5ae-40cb-aa0e-88788d035540 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=df7b8ff8-a1cd-476f-88ae-64a8c5423727 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=924b93d2-9047-44f5-aacb-8dfa4244f2f0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=54e7493e-db0a-400e-8d36-6a85aa5555f5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=76a1ba85-7053-4d21-8c73-e22c0dc95b5d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=066aed12-11e6-4d43-a528-f523843babfc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=9f854eb9-9fbc-49c4-a582-af96302e009d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=00c821a6-a659-49ce-90c2-97b5ec825e5e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=5c6de093-0d63-4cf0-9b58-722638a0b36d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=d5849f45-d91c-47d1-a731-ca24715fc658 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=4285905e-25b8-42b8-9b32-90d79b920159 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=993ee885-6bc2-4a1e-beb2-69a0709d2021 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=5a0f3a9a-7929-447e-ace2-21bab972f443 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=975549cd-94d8-43c8-9169-a4414b233245 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=493b6cc6-2fed-43c8-9ca1-32a2c9fbd48e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=014884ad-8811-4ddb-8d7a-fcaa116e148b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=0964609b-a658-4adb-8a8c-d845d155525e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=562f011e-2527-4132-a8f9-e6111a5ad96b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=5f06f0a4-0752-4183-ba93-69151659dfc5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=e2c82d31-a19f-4099-9be7-db3898baed00 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=181450fb-6f73-43ca-9947-6f621838e4b4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=687970d1-c501-4162-ab68-d8eb46312715 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=55fcc84c-ea0a-4f49-a5bd-e8f817e6220c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=582f7b9e-a817-4d93-b554-6c262b5003c0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=a0e479e8-a43c-40e0-b489-6cde50ccc7af user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=8435a5fe-3d91-4341-82a6-2bf254aef173 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=93d5ed6b-283a-433c-9175-7895e48ced4f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=71ff49f6-83be-4d48-8250-072021bfcbe5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=c455f68b-6ecd-4f13-861a-d82ceccfee20 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=63751909-48c2-4d3b-a85a-9a7c0a31fc73 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=CREATE uid=5f2073d2-a178-41da-b2b9-3531a55c3f52 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=bootstrap-tenant-namespace-queue type=ClusterPolicy v=2
2026-09-30T02:11:54Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=bootstrap-tenant-namespace-queue uid=63b453b9-63bd-41c9-bb89-e6c9414d6c32 v=2
2026-09-30T02:11:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=32ad4542-5a04-42a9-b4a0-412e7b32c489 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=1b0a57d3-a757-418a-ad0f-41cfb924034d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=c5dd8277-6931-4435-bded-46724cff2fa7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=47875dc2-dda7-47dc-8102-400bd8168a06 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=eb7b4794-6125-40b7-a6f4-7ce7d4404bea user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=2946d2a2-86fb-4d31-ba38-f9f63583abf1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=403c3ac4-b345-4589-a03d-0937c9481f3c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=487aa673-dae7-42d9-b354-d92619d5b330 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=c7712b21-d5f7-4eb3-9893-96fd7c537575 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=b409ccc3-3777-4444-bc6e-fe64e43f3e9e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=055d04f2-104c-40a4-9de9-fa8dbeec20e6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=77cd48ff-7bd5-4ef4-942a-d16d63f7d253 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=9f15a6e7-c5fb-4bd2-9c34-b435f277558f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=219c430e-d530-4eac-a88c-ce27636b5c20 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=34832207-e194-456e-9bfb-1cef66fafd0f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:57Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=2c8591de-d657-4093-b995-4605115a8fea user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=cee62465-fe34-491d-8a19-4e380a1b66c2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=2bae426a-9daa-4ec7-a475-8111dfc780d5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=3f17b4da-c240-49eb-b8f1-31ec8de782d8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=dc4fa4be-1feb-4036-b1a0-7835193c4dc5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=32f9be61-d6ae-4a0a-a3c3-cd6626b1ac43 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=9aed6565-1006-4934-9cdc-cd43f9170faf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=9939e294-31f2-4094-9abd-8f26656d6fef user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=6abf7028-de5a-49dc-b2cd-c53267fd71b6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=84ae0740-067f-4ab0-bb8d-3e6479df76f0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=83553588-b4dd-42ab-a529-87fa3dc80f6c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=f7f23a18-f583-4e57-aa57-e48024054d28 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=0f80458c-1ba3-43f1-b636-4d7fdb341f03 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=a38d73b5-4e49-4de2-919c-73b65f93a7bf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=92bee80b-997f-43da-aa5b-983b80ee3d3a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=b6ee92db-313c-46e9-bb69-e1e0453be800 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=8d6bdcc0-c9eb-4380-8ba5-c9f83b584e2f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=d2694d9b-95fc-47eb-8eea-43b42b7a56ac user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=3a01378a-475f-4ca7-9aaf-06c714c9b7df user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=c717d876-cca8-44b7-9093-7c139d3f0643 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=c1913183-7aeb-4f1c-b2b2-0c3049f52520 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=203445b7-c2b6-4757-a8e9-b86e9a95bae3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=243df4b7-225e-4734-805c-987535674157 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=1618aa89-db16-4900-bde4-a9ae51aee641 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=119d7a45-2c6b-4a79-b43c-85e09bbd277c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=38c2090e-69b2-4225-8624-e877819df339 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:59Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=b5a715cd-55b9-412c-a419-9196174ad2f3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:59Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=3eadf5a6-5657-4283-8649-21d0d244d61c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:59Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=1615c9a3-5ced-4c66-babc-2ecee959214f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:59Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=7ce3f155-2c58-43bf-b0a6-0643440c5932 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:59Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=f0943c6d-fd7a-45b5-ac58-bb73963338bf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:12:00Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=983a66bc-b532-40dc-82d5-746ea643f4a0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:12:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=36971a6f-c6f7-4de7-9606-e02cc9b9ece6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:12:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=b3ace749-5b83-420b-af70-47313d32bf11 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:12:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=a22ea948-96eb-461e-8b6d-afd4bfcea859 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:12:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=5f5973b3-1abd-4aa7-b19f-9578d9999219 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:12:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=35dec18a-12df-45ce-a827-43559e556360 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:12:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=b7f82849-ff9f-4f73-863b-94e71bee2e3e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:12:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=3e4f7433-744a-48d5-9ef5-28bf79c813e7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:12:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=80a54270-c617-480a-ae19-a7fa1b248bbc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:12:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=3a704bc7-564a-45e9-8011-42dbc4ae878a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:12:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=79daa4c5-c481-4e3f-87f6-12d4fffb4e56 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:12:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=a3fc65b0-3629-4517-95c8-63082653adde user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:12:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=a2e49fc3-3637-4839-aa19-350adbc89d6c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:12:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=14d415ac-f9d9-4ea8-860a-ead2a7e2db7e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:12:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=b9e08289-900b-4d88-9ce8-32f2d68c4abe user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:15:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29845575 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29845575 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=04df99d0-24c7-4f7b-86fe-57adc3772062 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=cdb6566b-4d99-4563-a5e0-d4e20030450e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"7062628d-4f98-474e-84e3-2a37cd417b56","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-09-30T02:15:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29845575-p9fws namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29845575-p9fws resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=09cfe32b-a193-4e2f-94dd-35eeecdcbf83 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=55e6a4ad-923a-43d2-bb27-0e0341425477"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"9061a2f3-ec1d-4835-9358-c4620cd8700c","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-09-30T02:15:01Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="apps/v1, Kind=StatefulSet" gvr="apps/v1, Resource=statefulsets" kind=StatefulSet logger=webhooks/resource/validate name=affinity-assistant-ca3a941c55 namespace=chains-e2e-idwi operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-idwi/StatefulSet/affinity-assistant-ca3a941c55 resource.gvk="apps/v1, Kind=StatefulSet" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=824b9b03-98d0-470e-9d7c-5d25daab687d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbc21b7d-cc46-4a62-ac12-7d0e5ebb6055"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dd279491-65ed-44dc-b200-546d2b23d8d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:15:01Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:statefulset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=affinity-assistant-ca3a941c55-0 namespace=chains-e2e-idwi operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-idwi/Pod/affinity-assistant-ca3a941c55-0 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=02da4c74-7c77-4306-a5e9-cc2d7bd6fb14 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=93ae1c15-f1f1-4576-b40e-d92c16a3ff20"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"fc6c255f-2de5-47df-b266-a64d06ef13f6","username":"system:serviceaccount:kube-system:statefulset-controller"} v=2
2026-09-30T02:15:02Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-tvgctctdxk-init-pod namespace=chains-e2e-idwi operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-idwi/Pod/buildah-demo-tvgctctdxk-init-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=4eb9d8e0-55dd-4144-8666-c7964331be77 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbc21b7d-cc46-4a62-ac12-7d0e5ebb6055"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dd279491-65ed-44dc-b200-546d2b23d8d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:15:17Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-tvgctctdxk-clone-repository-pod namespace=chains-e2e-idwi operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-idwi/Pod/buildah-demo-tvgctctdxk-clone-repository-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=d038d7ee-8fd3-4b3f-bd90-0e367b070be5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbc21b7d-cc46-4a62-ac12-7d0e5ebb6055"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dd279491-65ed-44dc-b200-546d2b23d8d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:15:22Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-zlvh7 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-zlvh7 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=f64ec67b-2818-4b73-96c5-2e93bc94e5f5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f5098396-7358-4677-96f2-1ae4b8ac03a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"c9b9953d-df28-47b7-b82d-df9dd0e64c8a","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-09-30T02:15:42Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-tvgctctdxk-prefetch-dependencies-pod namespace=chains-e2e-idwi operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=59442d3f-f5ff-41ed-8f2b-2f2f6b187957 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c4d7e8b-5c2a-4f27-a6a6-6d3f0a82ac39"],"authentication.kubernetes.io/node-name":["ip-10-0-173-17.ec2.internal"],"authentication.kubernetes.io/node-uid":["4ecbd42f-b5c9-421c-8bed-a6c1e2eecd71"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["4de86100-3088-441f-99b6-d2524d3be8e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:15:42Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-tvgctctdxk-prefetch-dependencies-pod namespace=chains-e2e-idwi operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=157252db-7931-4272-87c9-c8402e42766d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c4d7e8b-5c2a-4f27-a6a6-6d3f0a82ac39"],"authentication.kubernetes.io/node-name":["ip-10-0-173-17.ec2.internal"],"authentication.kubernetes.io/node-uid":["4ecbd42f-b5c9-421c-8bed-a6c1e2eecd71"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["4de86100-3088-441f-99b6-d2524d3be8e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:15:42Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-tvgctctdxk-prefetch-dependencies-pod namespace=chains-e2e-idwi operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-idwi/Pod/buildah-demo-tvgctctdxk-prefetch-dependencies-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=12c7e4c8-7953-40d3-8c65-06171efbdc72 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c4d7e8b-5c2a-4f27-a6a6-6d3f0a82ac39"],"authentication.kubernetes.io/node-name":["ip-10-0-173-17.ec2.internal"],"authentication.kubernetes.io/node-uid":["4ecbd42f-b5c9-421c-8bed-a6c1e2eecd71"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["4de86100-3088-441f-99b6-d2524d3be8e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:15:59Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-tvgctctdxk-build-container-pod namespace=chains-e2e-idwi operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-idwi/Pod/buildah-demo-tvgctctdxk-build-container-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=37e72a02-b230-4c8c-86dc-fa3073aa8743 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbc21b7d-cc46-4a62-ac12-7d0e5ebb6055"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dd279491-65ed-44dc-b200-546d2b23d8d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:16:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=c37ed1a0-5e3b-477c-864e-02af035a744a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:16:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=cd219744-f787-432d-ba6f-e92f11c5a9c6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:16:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=d525b790-7d95-4a1d-b375-c36c57649bd5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:16:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=b381f377-61f7-4368-a872-4b8676f4f8d8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:16:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=031b6534-503d-4b83-967a-8961b0fad33f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:16:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=c63c51f5-c2ed-42a8-8601-e07b97969028 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:16:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=b1df3be4-7294-4445-b504-7a61fff001c1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:16:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=658fd70d-442d-4226-89bf-7ba02cd4c8cb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:16:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=6967ba12-9c3b-4872-8d3d-176320c93f1d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:16:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=5eab32b2-bbc5-4ecf-92bd-c71c1059cfd1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:16:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=b6ccd654-a3e7-4d0e-a3ad-65d28aae04c6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:16:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=73a6ce9a-864b-470c-b5d9-fae9bb1f01bd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:16:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=0567d037-0e32-45c0-a52b-c64c7549a6be user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:16:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=11a10248-0f20-41f6-87a2-59e063cb4c7c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:16:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=fbeedc56-73f0-4364-b167-89b19def70c7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:18:06Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-tvgctctdxk-build-image-index-pod namespace=chains-e2e-idwi operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-idwi/Pod/buildah-demo-tvgctctdxk-build-image-index-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=667bfdd8-3861-453a-b27d-c2d086397ac9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbc21b7d-cc46-4a62-ac12-7d0e5ebb6055"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dd279491-65ed-44dc-b200-546d2b23d8d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:18:37Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-c5j5f namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-c5j5f resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=4624369e-2a5b-4990-924a-0119da923ae8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f5098396-7358-4677-96f2-1ae4b8ac03a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"c9b9953d-df28-47b7-b82d-df9dd0e64c8a","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-09-30T02:18:51Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-tvgctctdxk-apply-tags-pod namespace=chains-e2e-idwi operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-idwi/Pod/buildah-demo-tvgctctdxk-apply-tags-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=89b310fa-9e08-4f3e-b32b-1d5a2ca04530 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbc21b7d-cc46-4a62-ac12-7d0e5ebb6055"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dd279491-65ed-44dc-b200-546d2b23d8d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:18:51Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-tvgctctdxk-push-dockerfile-pod namespace=chains-e2e-idwi operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-idwi/Pod/buildah-demo-tvgctctdxk-push-dockerfile-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=40991581-10b0-40cc-b3c4-0955fd27bee6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbc21b7d-cc46-4a62-ac12-7d0e5ebb6055"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dd279491-65ed-44dc-b200-546d2b23d8d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:19:09Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-bd025b404b17a867044318706912ce82-pod namespace=chains-e2e-idwi operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=a926505b-6c7e-4da8-91dc-bd7fe01f234a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c4d7e8b-5c2a-4f27-a6a6-6d3f0a82ac39"],"authentication.kubernetes.io/node-name":["ip-10-0-173-17.ec2.internal"],"authentication.kubernetes.io/node-uid":["4ecbd42f-b5c9-421c-8bed-a6c1e2eecd71"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["4de86100-3088-441f-99b6-d2524d3be8e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:19:09Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-bd025b404b17a867044318706912ce82-pod namespace=chains-e2e-idwi operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=4a4cbd3f-d546-4dee-8fae-5fbb67d6d20c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c4d7e8b-5c2a-4f27-a6a6-6d3f0a82ac39"],"authentication.kubernetes.io/node-name":["ip-10-0-173-17.ec2.internal"],"authentication.kubernetes.io/node-uid":["4ecbd42f-b5c9-421c-8bed-a6c1e2eecd71"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["4de86100-3088-441f-99b6-d2524d3be8e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:19:09Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-bd025b404b17a867044318706912ce82-pod namespace=chains-e2e-idwi operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-idwi/Pod/verify-enterprise-contract-bd025b404b17a867044318706912ce82-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=e0931ba2-51c3-485e-a48a-3ad754903f9f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c4d7e8b-5c2a-4f27-a6a6-6d3f0a82ac39"],"authentication.kubernetes.io/node-name":["ip-10-0-173-17.ec2.internal"],"authentication.kubernetes.io/node-uid":["4ecbd42f-b5c9-421c-8bed-a6c1e2eecd71"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["4de86100-3088-441f-99b6-d2524d3be8e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:19:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=ec5b27a7-a0c7-48dd-bc40-f75a29ebffac user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:19:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=b1c23bc1-a86f-429f-82c0-fa482f916727 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:19:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=a371efd9-ed64-4cdc-bfcc-ac8736e3cec3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:19:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=fbbed790-b786-4cca-989a-7e1a9b6c1145 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:19:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=21f9e0c7-36fe-4544-90ae-4eea391aff55 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:19:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=a078a419-e8e6-4186-8cb1-4946d95feda9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:19:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=f6ccb4b2-57a9-4ac5-b3bb-9bc92f7ea1da user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:19:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=9952b7ba-4594-4b61-84be-807615746ef3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:19:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=e34816ef-625d-4fc6-86b8-f16788ff3a0d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:19:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=777e79f0-e74f-4c05-976c-ccfcc8b9d507 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:19:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=fbd100c6-b26f-4255-901a-92e9461837c8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:19:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=e6f9f17c-02a0-4ff2-a04b-f16cfd0f5765 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:19:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=3a780e9e-8d73-439e-ab04-7eb34a4dc718 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:19:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=16f5ae16-1f0d-4bc0-aa21-2d499ebddfab user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:19:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=e7b8485e-8cf4-42b3-bfcd-4a5c990214df user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:19:35Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-2007d5fd9236513c594314924a02d688-pod namespace=chains-e2e-idwi operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=fd638ae4-08cd-4d81-8103-ab6058238611 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c4d7e8b-5c2a-4f27-a6a6-6d3f0a82ac39"],"authentication.kubernetes.io/node-name":["ip-10-0-173-17.ec2.internal"],"authentication.kubernetes.io/node-uid":["4ecbd42f-b5c9-421c-8bed-a6c1e2eecd71"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["4de86100-3088-441f-99b6-d2524d3be8e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:19:35Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-2007d5fd9236513c594314924a02d688-pod namespace=chains-e2e-idwi operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=72502173-9c1c-4aef-9468-2268462aebda user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c4d7e8b-5c2a-4f27-a6a6-6d3f0a82ac39"],"authentication.kubernetes.io/node-name":["ip-10-0-173-17.ec2.internal"],"authentication.kubernetes.io/node-uid":["4ecbd42f-b5c9-421c-8bed-a6c1e2eecd71"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["4de86100-3088-441f-99b6-d2524d3be8e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:19:35Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-2007d5fd9236513c594314924a02d688-pod namespace=chains-e2e-idwi operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-idwi/Pod/verify-enterprise-contract-2007d5fd9236513c594314924a02d688-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=34acb1bd-79fa-45e2-8cf7-14bf37c481f9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c4d7e8b-5c2a-4f27-a6a6-6d3f0a82ac39"],"authentication.kubernetes.io/node-name":["ip-10-0-173-17.ec2.internal"],"authentication.kubernetes.io/node-uid":["4ecbd42f-b5c9-421c-8bed-a6c1e2eecd71"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["4de86100-3088-441f-99b6-d2524d3be8e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:19:37Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-2qsn6 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-2qsn6 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=7a84b658-e317-49e3-b61e-af54c03a27cd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f5098396-7358-4677-96f2-1ae4b8ac03a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"c9b9953d-df28-47b7-b82d-df9dd0e64c8a","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-09-30T02:19:58Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-7da359950ba7369732cc618f55c195ee-pod namespace=chains-e2e-idwi operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=23728397-6df8-4b3e-81e8-8e1902068a21 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbc21b7d-cc46-4a62-ac12-7d0e5ebb6055"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dd279491-65ed-44dc-b200-546d2b23d8d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:19:59Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-7da359950ba7369732cc618f55c195ee-pod namespace=chains-e2e-idwi operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=aa76b241-0c5b-486f-a47a-72d21152fec2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbc21b7d-cc46-4a62-ac12-7d0e5ebb6055"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dd279491-65ed-44dc-b200-546d2b23d8d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:19:59Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-7da359950ba7369732cc618f55c195ee-pod namespace=chains-e2e-idwi operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-idwi/Pod/verify-enterprise-contract-7da359950ba7369732cc618f55c195ee-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=fbb1e467-2613-440a-9b64-eb2be5e51bd0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbc21b7d-cc46-4a62-ac12-7d0e5ebb6055"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dd279491-65ed-44dc-b200-546d2b23d8d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:20:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29845580 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29845580 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=28a28297-f207-4b9b-93c2-fca60daba2f9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=cdb6566b-4d99-4563-a5e0-d4e20030450e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"7062628d-4f98-474e-84e3-2a37cd417b56","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-09-30T02:20:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29845580 namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Job/osd-delete-backplane-serviceaccounts-29845580 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=9ad54821-008d-4541-9cfa-e927a2c55d86 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=cdb6566b-4d99-4563-a5e0-d4e20030450e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"7062628d-4f98-474e-84e3-2a37cd417b56","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-09-30T02:20:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29845580-6mshx namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29845580-6mshx resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=971f53de-95c9-4213-b31a-644326a0813a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=55e6a4ad-923a-43d2-bb27-0e0341425477"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"9061a2f3-ec1d-4835-9358-c4620cd8700c","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-09-30T02:20:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29845580-g85dp namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Pod/osd-delete-backplane-serviceaccounts-29845580-g85dp resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=50e76936-6abd-4fc0-b66d-1cb5d78120c2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=55e6a4ad-923a-43d2-bb27-0e0341425477"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"9061a2f3-ec1d-4835-9358-c4620cd8700c","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-09-30T02:20:14Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-1bfe3b5639fcc0e4a386d69417ecc49f-pod namespace=chains-e2e-idwi operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=3375091c-5835-4317-92a3-9d2648292da2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c4d7e8b-5c2a-4f27-a6a6-6d3f0a82ac39"],"authentication.kubernetes.io/node-name":["ip-10-0-173-17.ec2.internal"],"authentication.kubernetes.io/node-uid":["4ecbd42f-b5c9-421c-8bed-a6c1e2eecd71"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["4de86100-3088-441f-99b6-d2524d3be8e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:20:14Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-1bfe3b5639fcc0e4a386d69417ecc49f-pod namespace=chains-e2e-idwi operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=08a1a77c-99ab-41f6-912b-531da9f10bc6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c4d7e8b-5c2a-4f27-a6a6-6d3f0a82ac39"],"authentication.kubernetes.io/node-name":["ip-10-0-173-17.ec2.internal"],"authentication.kubernetes.io/node-uid":["4ecbd42f-b5c9-421c-8bed-a6c1e2eecd71"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["4de86100-3088-441f-99b6-d2524d3be8e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:20:14Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-1bfe3b5639fcc0e4a386d69417ecc49f-pod namespace=chains-e2e-idwi operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-idwi/Pod/verify-enterprise-contract-1bfe3b5639fcc0e4a386d69417ecc49f-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=fa92facf-da42-4db4-98d3-5d04cf4ff7de user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c4d7e8b-5c2a-4f27-a6a6-6d3f0a82ac39"],"authentication.kubernetes.io/node-name":["ip-10-0-173-17.ec2.internal"],"authentication.kubernetes.io/node-uid":["4ecbd42f-b5c9-421c-8bed-a6c1e2eecd71"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["4de86100-3088-441f-99b6-d2524d3be8e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:20:25Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-0c79f2a7dc197766fdad67e972b91d5d-pod namespace=chains-e2e-idwi operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=e85d3298-9d9c-4abe-81bb-669d3b0310f8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c4d7e8b-5c2a-4f27-a6a6-6d3f0a82ac39"],"authentication.kubernetes.io/node-name":["ip-10-0-173-17.ec2.internal"],"authentication.kubernetes.io/node-uid":["4ecbd42f-b5c9-421c-8bed-a6c1e2eecd71"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["4de86100-3088-441f-99b6-d2524d3be8e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:20:26Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-0c79f2a7dc197766fdad67e972b91d5d-pod namespace=chains-e2e-idwi operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=23ea7a8e-28f7-4f71-af0b-a6edc9e2a6a8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c4d7e8b-5c2a-4f27-a6a6-6d3f0a82ac39"],"authentication.kubernetes.io/node-name":["ip-10-0-173-17.ec2.internal"],"authentication.kubernetes.io/node-uid":["4ecbd42f-b5c9-421c-8bed-a6c1e2eecd71"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["4de86100-3088-441f-99b6-d2524d3be8e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:20:26Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-0c79f2a7dc197766fdad67e972b91d5d-pod namespace=chains-e2e-idwi operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-idwi/Pod/verify-enterprise-contract-0c79f2a7dc197766fdad67e972b91d5d-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=5646f714-15b1-44d8-b4a4-40bbec551436 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c4d7e8b-5c2a-4f27-a6a6-6d3f0a82ac39"],"authentication.kubernetes.io/node-name":["ip-10-0-173-17.ec2.internal"],"authentication.kubernetes.io/node-uid":["4ecbd42f-b5c9-421c-8bed-a6c1e2eecd71"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["4de86100-3088-441f-99b6-d2524d3be8e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:20:41Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-14e1362b1651c1f6cdc9afff5c8f94bb-pod namespace=chains-e2e-idwi operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=f4ffe382-ac6b-4de2-a679-1aeb4a15b34c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c4d7e8b-5c2a-4f27-a6a6-6d3f0a82ac39"],"authentication.kubernetes.io/node-name":["ip-10-0-173-17.ec2.internal"],"authentication.kubernetes.io/node-uid":["4ecbd42f-b5c9-421c-8bed-a6c1e2eecd71"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["4de86100-3088-441f-99b6-d2524d3be8e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:20:41Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-14e1362b1651c1f6cdc9afff5c8f94bb-pod namespace=chains-e2e-idwi operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=5e44f602-d45d-4dc9-b384-655cbc3ca854 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c4d7e8b-5c2a-4f27-a6a6-6d3f0a82ac39"],"authentication.kubernetes.io/node-name":["ip-10-0-173-17.ec2.internal"],"authentication.kubernetes.io/node-uid":["4ecbd42f-b5c9-421c-8bed-a6c1e2eecd71"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["4de86100-3088-441f-99b6-d2524d3be8e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:20:41Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-14e1362b1651c1f6cdc9afff5c8f94bb-pod namespace=chains-e2e-idwi operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-idwi/Pod/verify-enterprise-contract-14e1362b1651c1f6cdc9afff5c8f94bb-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=6df8014a-3ca2-47b8-8d3d-f1d474892d07 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c4d7e8b-5c2a-4f27-a6a6-6d3f0a82ac39"],"authentication.kubernetes.io/node-name":["ip-10-0-173-17.ec2.internal"],"authentication.kubernetes.io/node-uid":["4ecbd42f-b5c9-421c-8bed-a6c1e2eecd71"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["4de86100-3088-441f-99b6-d2524d3be8e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:21:00Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-df1e727f5c743ea7dc266da1e47d7313-pod namespace=chains-e2e-idwi operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=33de8c9c-e172-4200-8eac-0c653fb865fc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbc21b7d-cc46-4a62-ac12-7d0e5ebb6055"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dd279491-65ed-44dc-b200-546d2b23d8d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:21:00Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-df1e727f5c743ea7dc266da1e47d7313-pod namespace=chains-e2e-idwi operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=0003b539-efd8-4536-8bf3-fec9ae84bf72 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbc21b7d-cc46-4a62-ac12-7d0e5ebb6055"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dd279491-65ed-44dc-b200-546d2b23d8d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:21:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-df1e727f5c743ea7dc266da1e47d7313-pod namespace=chains-e2e-idwi operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-idwi/Pod/verify-enterprise-contract-df1e727f5c743ea7dc266da1e47d7313-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=da93f607-ffea-481f-bb47-a6618cc60d29 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbc21b7d-cc46-4a62-ac12-7d0e5ebb6055"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dd279491-65ed-44dc-b200-546d2b23d8d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:21:26Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-fe0981deca3f889152a09426a114141e-pod namespace=chains-e2e-idwi operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=c31bf703-41b6-4d7e-9ac6-c15a14be04b4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c4d7e8b-5c2a-4f27-a6a6-6d3f0a82ac39"],"authentication.kubernetes.io/node-name":["ip-10-0-173-17.ec2.internal"],"authentication.kubernetes.io/node-uid":["4ecbd42f-b5c9-421c-8bed-a6c1e2eecd71"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["4de86100-3088-441f-99b6-d2524d3be8e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:21:26Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-fe0981deca3f889152a09426a114141e-pod namespace=chains-e2e-idwi operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=66d58631-28f8-4a0b-9d64-0bd5fbc9399f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c4d7e8b-5c2a-4f27-a6a6-6d3f0a82ac39"],"authentication.kubernetes.io/node-name":["ip-10-0-173-17.ec2.internal"],"authentication.kubernetes.io/node-uid":["4ecbd42f-b5c9-421c-8bed-a6c1e2eecd71"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["4de86100-3088-441f-99b6-d2524d3be8e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:21:26Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-fe0981deca3f889152a09426a114141e-pod namespace=chains-e2e-idwi operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-idwi/Pod/verify-enterprise-contract-fe0981deca3f889152a09426a114141e-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=bb863498-15f7-4e0f-a4c5-8f81ec04283c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c4d7e8b-5c2a-4f27-a6a6-6d3f0a82ac39"],"authentication.kubernetes.io/node-name":["ip-10-0-173-17.ec2.internal"],"authentication.kubernetes.io/node-uid":["4ecbd42f-b5c9-421c-8bed-a6c1e2eecd71"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["4de86100-3088-441f-99b6-d2524d3be8e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:21:42Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-03b5a880b813f51e604970456958370b-pod namespace=chains-e2e-idwi operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=c8653fed-6fc9-449a-aabf-ecc14b2eaabf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbc21b7d-cc46-4a62-ac12-7d0e5ebb6055"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dd279491-65ed-44dc-b200-546d2b23d8d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:21:42Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-03b5a880b813f51e604970456958370b-pod namespace=chains-e2e-idwi operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=469f6429-5f7c-4943-afc7-bb326a21ee31 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbc21b7d-cc46-4a62-ac12-7d0e5ebb6055"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dd279491-65ed-44dc-b200-546d2b23d8d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:21:42Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-03b5a880b813f51e604970456958370b-pod namespace=chains-e2e-idwi operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-idwi/Pod/verify-enterprise-contract-03b5a880b813f51e604970456958370b-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=3883f37e-d6a8-4ea5-ad1a-31016ac157e8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbc21b7d-cc46-4a62-ac12-7d0e5ebb6055"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["dd279491-65ed-44dc-b200-546d2b23d8d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ad644800-08be-461e-97d2-9fbcea6f4e59","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:21:53Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-58q2x namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-58q2x resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=dd3e6014-7601-492b-acde-53709a5dc8d1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f5098396-7358-4677-96f2-1ae4b8ac03a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"c9b9953d-df28-47b7-b82d-df9dd0e64c8a","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-09-30T02:22:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=8aa45b79-05bc-42a6-8c88-f222a3b3474d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:22:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=3a8339c4-6d0c-406a-9f8a-381a46407318 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:22:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=34480820-7c8d-4d25-8fca-ddd54d8cb5e8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:22:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=2d7f845d-3a33-4647-9d6d-46ab56a5c44c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:22:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=6159510e-3178-40de-b331-566267e7adb7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:22:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=716e02bf-fd30-4b7d-b566-526aa6a02fba user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:22:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=02e5c9bd-5797-4e92-b90a-606b226b4679 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:22:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=62944cdd-e8d8-4922-ac76-53dd626c1c73 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:22:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=b09ee152-756d-4d5b-adae-687dc23ddb4e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:22:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=10b5957f-ca67-4a1e-83bf-d7e4811ab308 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:22:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=6fca5830-42bc-490f-b6ad-26a919031986 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:22:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=38070cc9-9b68-4862-913b-1c3158c4ac34 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:22:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=088f7b0e-8be0-4699-b620-7e0d5b9706e2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:22:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=77b4a4d6-987c-4b08-bdf4-fa3b083eef46 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:22:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=b9284fcd-6c8d-4427-b553-b20c76253856 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac61abbc-20d8-4f45-a5f8-6c68bb0b03e2"],"authentication.kubernetes.io/node-name":["ip-10-0-147-12.ec2.internal"],"authentication.kubernetes.io/node-uid":["f8aaa441-c301-4ae8-8bbd-ebe3af96e019"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["7bc2270d-572c-4540-b75c-88120becff8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"79d88c88-dc16-4102-b8d1-ca9d0a6e52f2","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2