2026-09-25T22:07:55Z TRC kyverno/pkg/version/version.go:49 > version hash=--- logger=setup/version v=2 version=1.26.5 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > add_dir_header=false logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > admissionReports=false logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > allowHTTPInNamespacedPolicies= logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > allowInsecureRegistry=false logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > allowedResults=pass,fail,error,warn,skip logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderr=false logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderrthreshold=0 logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > apiCallTimeout=30s logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitEnabled=true logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitRatio=0.9 logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > autoUpdateWebhooks=true logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > backgroundServiceAccountName=system:serviceaccount:konflux-kyverno:kyverno-background-controller logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > caSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-ca logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerHost= logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerPort=9443 logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitBurst=200 logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitQPS=100 logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > controllerRuntimeMetricsAddress=:8080 logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > crdWatcher=false logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > disableCertManagerController=false logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > disableLogColor=false logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > disableMetrics=false logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > dumpPatches= logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > dumpPayload=false logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > enableConfigMapCaching=true logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > enableCosignLogging=false logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > enableDeferredLoading= logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > enablePolicyException=false logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > enableReporting= logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > enableTracing=false logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > enableTuf=false logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitBurst=2000 logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitQPS=1000 logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > exceptionNamespace= logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > excludeBootstrapResources=false logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > exemplarFilter=trace-based logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > forceFailurePolicyIgnore= logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > generateMutatingAdmissionPolicy= logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > generateValidatingAdmissionPolicy= logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > httpAllowlist= logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > httpBlocklist= logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > imagePullSecrets= logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheEnabled=true logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheMaxSize=1000 logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheTTLDuration=1h0m0s logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > kubeconfig= logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > leaderElectionRetryPeriod=26s logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > legacy_stderr_threshold_behavior=true logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > log_backtrace_at=:0 logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > log_dir= logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > log_file= logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > log_file_max_size=1800 logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingFormat=text v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingtsFormat=default v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag logtostderr=true v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAPICallResponseLength=2000000 v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAdmissionReports=1000 v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditCapacity=1000 v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditWorkers=8 v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxGlobalContextEntries=0 v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxQueuedEvents=1000 v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsCASecretName= v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsHost= v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsKeyAlgorithm=RSA v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsPort=8000 v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsRenewBefore=360h0m0s v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsServerIP= v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsTLSSecretName= v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag omitEvents=PolicyApplied,PolicySkipped v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag one_output=false v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelCollector=opentelemetrycollector.kyverno.svc.cluster.local v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelConfig=prometheus v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profile=false v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profileAddress= v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profilePort=6060 v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag protectManagedResources= v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag registryCredentialHelpers=default,google,amazon,azure,github v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag renewBefore=360h0m0s v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag reportsServiceAccountName= v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag resyncPeriod=15m0s v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag serverIP= v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag servicePort=443 v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_headers=false v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_log_headers=false v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag stderrthreshold=2 v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsKeyAlgorithm=RSA v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-pair v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingAddress= v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingCreds= v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingPort=4317 v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag transportCreds= v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufMirror=https://tuf-repo-cdn.sigstore.dev v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRoot= v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRootRaw= v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 vmodule= 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookRegistrationTimeout=2m0s 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerHost= 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerPort=9443 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookTimeout=10 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/maxprocs.go:12 > setup maxprocs... logger=setup/maxprocs v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/memlimit.go:13 > setup memlimit... logger=setup/memlimit ratio=0.9 v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/signal.go:16 > setup signals... logger=setup/signals v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2 2026-09-25T22:07:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformers logger=klog v=1 2026-09-25T22:07:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsPreferCBOR logger=klog v=1 2026-09-25T22:07:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowTLSCacheGC logger=klog v=1 2026-09-25T22:07:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=WatchListClient logger=klog v=1 2026-09-25T22:07:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=UnlockWhileProcessingFIFO logger=klog v=1 2026-09-25T22:07:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformersBatchProcess logger=klog v=1 2026-09-25T22:07:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowCARotation logger=klog v=1 2026-09-25T22:07:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsAllowCBOR logger=klog v=1 2026-09-25T22:07:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InformerResourceVersion logger=klog v=1 2026-09-25T22:07:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=AtomicFIFO logger=klog v=1 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/configmap.go:36 > create metrics-config-controller... logger=setup/metrics-config-controller v=2 2026-09-25T22:07:55Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/configmap.go:52 > done creating metrics-config-controller logger=setup/metrics-config-controller v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/metrics.go:27 > setup metrics... collector=opentelemetrycollector.kyverno.svc.cluster.local creds= exemplarFilter=trace-based logger=setup/metrics otel=prometheus port=8000 tlsSecretName= v=2 2026-09-25T22:07:55Z TRC kyverno/cmd/internal/configmap.go:15 > create config-controller... logger=setup/config-controller v=2 2026-09-25T22:07:55Z INF kyverno/cmd/internal/metrics.go:159 > Starting HTTP metrics server address=[]:8000 logger=setup/metrics v=0 2026-09-25T22:07:55Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2 2026-09-25T22:07:56Z TRC kyverno/pkg/config/config.go:433 > defaultRegistry configured defaultRegistry=docker.io logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 2026-09-25T22:07:56Z TRC kyverno/pkg/config/config.go:449 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 2026-09-25T22:07:56Z TRC kyverno/pkg/config/config.go:458 > excludedGroups configured excludeGroups=["system:nodes"] includeGroups=[] logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 2026-09-25T22:07:56Z TRC kyverno/pkg/config/config.go:463 > excludeUsernames not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 2026-09-25T22:07:56Z TRC kyverno/pkg/config/config.go:471 > excludeRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 2026-09-25T22:07:56Z TRC kyverno/pkg/config/config.go:479 > excludeClusterRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 2026-09-25T22:07:56Z TRC kyverno/pkg/config/config.go:495 > generateSuccessEvents configured generateSuccessEvents=false logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 2026-09-25T22:07:56Z TRC kyverno/pkg/config/config.go:501 > successEventActions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 2026-09-25T22:07:56Z TRC kyverno/pkg/config/config.go:525 > webhooks configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhooks="{\"namespaceSelector\":{\"matchExpressions\":[{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"kube-system\"]},{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"konflux-kyverno\"]}],\"matchLabels\":null}}" 2026-09-25T22:07:56Z TRC kyverno/pkg/config/config.go:539 > webhookAnnotations configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhookAnnotations="{\"admissions.enforcer/disabled\":\"true\"}" 2026-09-25T22:07:56Z TRC kyverno/pkg/config/config.go:545 > webhookLabels not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 2026-09-25T22:07:56Z TRC kyverno/pkg/config/config.go:559 > matchConditions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 2026-09-25T22:07:56Z TRC kyverno/pkg/config/config.go:580 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 2026-09-25T22:07:56Z TRC kyverno/pkg/config/config.go:595 > maxContextSize not set, using default default=2097152 logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 2026-09-25T22:07:56Z TRC kyverno/cmd/internal/configmap.go:31 > done creating config-controller logger=setup/config-controller v=2 2026-09-25T22:07:56Z TRC kyverno/cmd/internal/registry.go:18 > setup registry client... insecure=false logger=setup/registry-client secrets= v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2 2026-09-25T22:07:56Z TRC kyverno/cmd/internal/imageverifycache.go:10 > setup image verify cache... enabled=true logger=setup/image-verify-cache maxsize=1000 ttl=1h0m0s v=2 2026-09-25T22:07:56Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2 2026-09-25T22:07:56Z TRC kyverno/cmd/internal/client.go:60 > create kyverno client... burst=200 kubeconfig= logger=setup/kyverno-client qps=100 v=2 2026-09-25T22:07:56Z TRC kyverno/cmd/internal/client.go:68 > create dynamic client... burst=200 kubeconfig= logger=setup/dynamic-client qps=100 v=2 2026-09-25T22:07:56Z TRC kyverno/cmd/internal/client.go:84 > create apiserver client... burst=200 kubeconfig= logger=setup/apiserver-client qps=100 v=2 2026-09-25T22:07:56Z TRC kyverno/cmd/internal/client.go:76 > create metadata client... burst=200 kubeconfig= logger=setup/metadata-client qps=100 v=2 2026-09-25T22:07:56Z TRC kyverno/cmd/internal/client.go:92 > create the kyverno dynamic client... burst=200 kubeconfig= logger=setup/d-client qps=100 v=2 2026-09-25T22:07:56Z TRC kyverno/cmd/internal/client.go:100 > create the events client... burst=200 kubeconfig= logger=setup/events-client qps=100 v=2 2026-09-25T22:07:56Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/events-client/kube-client qps=100 v=2 2026-09-25T22:07:56Z TRC kyverno/cmd/internal/reporting.go:13 > setting up reporting... enableReporting= generate=false imageVerify=false logger=setup/setup-reporting mutate=false mutateExisiting=false v=2 validate=false 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2 2026-09-25T22:07:56Z TRC kyverno/cmd/internal/engine.go:62 > setup exception selector... enablePolicyException=false exceptionNamespace= logger=setup/exception-selector v=2 2026-09-25T22:07:56Z TRC kyverno/cmd/internal/engine.go:91 > setup config map resolver... enableConfigMapCaching=true logger=setup/configmap-resolver v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2 2026-09-25T22:07:56Z TRC kyverno/cmd/internal/engine.go:44 > setup engine... logger=setup/engine v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2beta1.GlobalContextEntry v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.UpdateRequest v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Policy v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterPolicy v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2 2026-09-25T22:07:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:208 > Starting metrics server logger=controller-runtime/metrics v=0 2026-09-25T22:07:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:247 > Serving metrics server bindAddress=:8080 logger=controller-runtime/metrics secure=false v=0 2026-09-25T22:07:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy source="kind source: *v1beta1.ValidatingPolicy" v=0 2026-09-25T22:07:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy source="kind source: *v1beta1.ImageValidatingPolicy" v=0 2026-09-25T22:07:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy source="kind source: *v1beta1.NamespacedValidatingPolicy" v=0 2026-09-25T22:07:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy source="kind source: *v1beta1.MutatingPolicy" v=0 2026-09-25T22:07:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy source="kind source: *v1beta1.NamespacedMutatingPolicy" v=0 2026-09-25T22:07:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy source="kind source: *v1beta1.NamespacedImageValidatingPolicy" v=0 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.PolicyException v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.GeneratingPolicy v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedGeneratingPolicy v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Namespace v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRoleBinding v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.RoleBinding v=2 2026-09-25T22:07:56Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:258 > Attempting to acquire leader lease... lock=konflux-kyverno/kyverno logger=klog v=0 2026-09-25T22:07:56Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=kyverno-events v=2 workers=3 2026-09-25T22:07:56Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=global-context v=2 workers=1 2026-09-25T22:07:56Z TRC kyverno/pkg/event/controller.go:125 > start logger=EventGenerator v=2 2026-09-25T22:07:56Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/controllers name=policycache-controller v=2 workers=3 2026-09-25T22:07:56Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:272 > Successfully acquired lease lock=konflux-kyverno/kyverno logger=klog v=0 2026-09-25T22:07:56Z TRC kyverno/pkg/leaderelection/leaderelection.go:82 > started leading id=kyverno-admission-controller-576ff55549-s8gwq logger=setup/leader-election v=2 2026-09-25T22:07:56Z TRC kyverno/cmd/kyverno/main.go:335 > MutatingAdmissionPolicy API is not registered, skipping MAP informers error="mutating admission policy API is not registered" v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicyBinding v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Lease v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingWebhookConfiguration v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.MutatingWebhookConfiguration v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicy v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRole v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2 2026-09-25T22:07:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.PolicyException v=2 2026-09-25T22:07:57Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2 2026-09-25T22:07:57Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2 2026-09-25T22:07:57Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2 2026-09-25T22:07:57Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2 2026-09-25T22:07:57Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2 2026-09-25T22:07:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0 2026-09-25T22:07:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0 worker count=1 2026-09-25T22:07:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0 2026-09-25T22:07:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0 worker count=1 2026-09-25T22:07:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0 2026-09-25T22:07:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0 worker count=1 2026-09-25T22:07:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0 2026-09-25T22:07:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0 2026-09-25T22:07:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0 worker count=1 2026-09-25T22:07:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0 worker count=1 2026-09-25T22:07:57Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=admissionpolicy-generator v=2 workers=2 2026-09-25T22:07:57Z TRC kyverno/pkg/utils/controller/run.go:20 > starting ... logger=admissionpolicy-generator v=2 2026-09-25T22:07:57Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=exception-webhook-controller v=2 workers=1 2026-09-25T22:07:57Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=global-context-webhook-controller v=2 workers=1 2026-09-25T22:07:57Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=certmanager-controller v=2 workers=1 2026-09-25T22:07:57Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=status-controller v=2 workers=3 2026-09-25T22:07:57Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=celexception-webhook-controller v=2 workers=1 2026-09-25T22:07:57Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=webhook-controller v=2 workers=2 2026-09-25T22:07:57Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller 2026-09-25T22:07:57Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller 2026-09-25T22:07:57Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller 2026-09-25T22:07:57Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller 2026-09-25T22:07:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0 2026-09-25T22:07:57Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0 worker count=1 2026-09-25T22:10:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=CREATE uid=1c64c4ea-10d3-439d-81eb-1c7c0a6ab490 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring uid=0cc138ec-3d5c-48be-9680-b699d15cf6d5 v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring type=ClusterPolicy v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=CREATE uid=2a15efc1-dde4-4f57-9329-f11793aca048 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=CREATE uid=66195ca9-6a4a-411a-b48c-d08189781f4f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress uid=b784e957-8522-4d8a-bf1f-cece24ba5644 v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress type=ClusterPolicy v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-generate-konflux-viewer-access uid=46f6c49e-904d-428c-9db4-6e98a34d7ae2 v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-generate-konflux-viewer-access type=ClusterPolicy v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=integration-init-ns-integration namespace= operation=CREATE uid=fa88e4b0-dc5d-4ddd-a91a-017607e12e9a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=integration-init-ns-integration type=ClusterPolicy v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=integration-init-ns-integration uid=ed9a23d5-0582-4f82-99d5-71c6d52a7a2a v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=CREATE uid=1493ad79-4f7a-48fd-a795-a10245f0cbaa user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole uid=0629216d-aa4d-45fb-bba9-78543b82e025 v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole type=ClusterPolicy v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=CREATE uid=c0049c5c-acf5-4acb-90ce-475da10eda53 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-olm uid=076e2f72-6e53-4b20-928f-857eef6e4687 v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-olm type=ClusterPolicy v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=CREATE uid=babb88aa-ec86-401b-9c5f-5cec0906c1af user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=CREATE uid=c18b9edb-4e73-4a24-8c77-1743f1780544 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-rbcm uid=daeadbe2-82f6-499c-90cf-5da2883d0058 v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-rbcm type=ClusterPolicy v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace type=ClusterPolicy v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace uid=42d00007-653b-405d-b009-f4a79ff257fc v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=962b6923-f8e9-4120-a3dc-0a06d6057311 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=d8c9e94e-f91f-413e-8e32-3197a0011fe8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=CREATE uid=5fac50e8-b952-4666-a13f-34260a41ddf3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:51Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-system-authenticated type=ClusterPolicy v=2 2026-09-25T22:10:51Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-system-authenticated uid=a35fcfb7-75ef-463b-92ab-e17ce77149d4 v=2 2026-09-25T22:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=CREATE uid=20f732a9-5b71-4c9c-863a-d91dec2b2b37 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:51Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-sysauth-releng type=ClusterPolicy v=2 2026-09-25T22:10:51Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-sysauth-releng uid=d98596d3-5860-4378-9693-68df78c60f12 v=2 2026-09-25T22:10:51Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-system-authenticated\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-system-authenticated status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}} 2026-09-25T22:10:51Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-sysauth-releng\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-sysauth-releng status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}} 2026-09-25T22:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=4724e73a-9db9-4fb2-be88-8b8912f3a4db user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=CREATE uid=47409950-b953-4d7b-8e53-cf8e0eee05ec user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:51Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-docker-io-images type=ClusterPolicy v=2 2026-09-25T22:10:51Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-docker-io-images uid=cdc17515-c5cf-4be1-a81d-083df6f22fb1 v=2 2026-09-25T22:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=CREATE uid=1cfd0a9a-db0e-46cf-9372-55426121275c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:51Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-binding-system-groups uid=481a4622-b418-4241-a058-93ee25328a61 v=2 2026-09-25T22:10:51Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-binding-system-groups type=ClusterPolicy v=2 2026-09-25T22:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=CREATE uid=061bcb74-7453-4f44-b5da-8a8f04c12969 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:51Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-docker-io-images\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-docker-io-images status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}} 2026-09-25T22:10:51Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=tekton-taskrun-resource-policy type=ClusterPolicy v=2 2026-09-25T22:10:51Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=tekton-taskrun-resource-policy uid=61fc9e5e-e107-487e-a7c0-262c879e7911 v=2 2026-09-25T22:10:51Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-binding-system-groups\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-binding-system-groups status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}} 2026-09-25T22:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=7e3017cb-f3dc-47c0-83f5-41f9b39c63d8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=integration-init-ns-integration namespace= operation=UPDATE uid=a34bba56-53eb-4107-8382-d5dfb9b90061 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=16b63d66-a929-4c23-a6b6-05cac7fd9e12 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=b117f403-1aa6-4e39-b715-5f68971bd0d2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=a3bda219-b0c9-4fd9-aa96-ad4e0c26aefe user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=ee344d1f-cac5-4e96-a92b-5c4b7d028fc9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=d212bdc5-76fd-468e-abb2-05be532541d5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=9c110711-b650-4ad9-9350-90cbd71a9ea9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=fd7106b2-b020-430e-b1d1-cdff0019bc24 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=3532c648-73d9-4b23-ac0e-721d9c63555d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=6d92bf2d-dba8-4957-8dd3-20ffdb597804 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=0e361b80-b409-4e2f-b3cc-5f3ed1afa111 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=7d3abe8a-db3d-43a9-a7cd-91a6130cc775 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=integration-init-ns-integration namespace= operation=UPDATE uid=1c8e82b6-d3a9-48b9-80a0-f9e01aaf120b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=195857c3-9552-4106-b122-a29164dd500a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=62821639-3a8e-46e8-877b-daf187f2163e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=86ee57c8-38d4-47f5-ba67-03229c3b0edf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=5aee6cf8-4e1f-49ba-8460-d316e92270bd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=352f39b5-0d2c-43e3-85f7-cf2250871545 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=58a585d7-732c-4867-a6a3-f01eaca97eb6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=ee3284e7-38e7-4944-b553-d41d8f8e2f1c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=b04dbc44-d4dd-41f4-8824-b2f4c695fb83 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=integration-init-ns-integration namespace= operation=UPDATE uid=580dcdda-c1f0-49b4-9b4d-472e9b610388 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=cfccbc3b-b5a4-41d4-a082-98d610baedb5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=ccb613a0-adaf-461f-a1e4-3b95a4499c2c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=45052719-74a7-4017-a952-286e05a57238 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=b9fd7033-1e2f-4917-82b6-c8a32e61af27 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=c472c143-a0ab-48d1-885a-8bce8753c431 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=954e6b51-92ae-43b6-9764-7ce322478fb4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=0fb67f37-7bc5-4795-b2fb-b4f46d598751 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=f172ddad-a74a-4cc7-b28f-7acefad3205a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=35dc9358-ac72-44a5-92a8-7deaa37e1ddb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=dae8ca4c-c3a8-4899-aa47-62319d26692c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=348310d4-5792-4301-ad7e-1073aad25285 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=910ee56e-96cb-4144-a6b9-f3c145a75689 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=36fe4666-fc22-47dc-bc88-ae1749c79c51 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=6a8748aa-1900-4615-a2b8-664b65b2e2ab user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=500adea8-d0ac-4883-a9fc-6f0b5bf87c99 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=8310694c-0b60-4b5f-8998-7d0d0e86486b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=CREATE uid=43855a4b-d80f-424c-ae1f-eb7237470ece user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:55Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=bootstrap-tenant-namespace-queue type=ClusterPolicy v=2 2026-09-25T22:10:55Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=bootstrap-tenant-namespace-queue uid=32ea6667-8d1d-4ae6-b5ca-90d939063d65 v=2 2026-09-25T22:10:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=d3f267be-bf16-474e-827e-34f8f24efe72 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=06647285-c056-4c55-8cca-fe355c6810ea user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=8d277519-7ca0-4a4d-9b66-1c9244803be5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=caeb3811-4e1e-4aa8-bb65-2a00e8d47108 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=273966ea-a774-4ba1-8512-bc2dd1c66366 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=f0c8b21b-ff92-43dd-9c40-4d713862439a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=d5453cb4-f838-4b4e-8186-514ea9aa7a18 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=98817bda-eb94-4edd-b70b-63add40f7dff user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=cfa155d6-ef49-44d1-9204-c63d2fc61e97 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=5be529a9-68f2-49ee-b88b-66b7f289748d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=45d2698b-2836-46b0-998a-5e64285fb552 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=5e28df51-bf2a-414f-b31b-de75a6d5c409 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:56Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=integration-init-ns-integration namespace= operation=UPDATE uid=9e351821-a7be-4ea1-adbb-7366c4624c08 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:57Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=22dc4db7-d791-40f8-8b54-b876aebc6734 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:57Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=8c7d0869-e3bf-4bfd-b6e1-ec62efebc567 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:57Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=e45ac11e-1e93-47e3-b1e0-86846fda7c44 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:57Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=ce782032-9407-4cc1-aa83-9b9847958a64 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:57Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=4011b7f1-007e-4f40-a7b8-f63086e505ff user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:57Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=6aa23e55-cc61-4a0d-8501-a8896f682eea user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:57Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=b3c30830-154e-41b1-b670-7972bd7b34ec user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:57Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=d5f79c58-6a36-4854-b1bc-af8541be28d6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:57Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=integration-init-ns-integration namespace= operation=UPDATE uid=0cd8496b-b47b-4ef6-9fc8-1068376763b7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=6c596968-e6b3-426f-b9b5-6c98bbbf2dc4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=575b43ae-773e-48d5-b189-aaadd702c782 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=a5f64278-eee9-4e5d-8e1a-8eab4e216a58 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=3d546497-c3a3-440c-80d0-8326f8210edd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:10:58Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=0570190a-f124-45ec-aa35-33eb48a01379 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:13:07Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-project-controller","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="apps/v1, Kind=Deployment" gvr="apps/v1, Resource=deployments" kind=Deployment logger=webhooks/resource/validate name=tekton-results-watcher namespace=tekton-results operation=CREATE policy=restrict-docker-io-images resource=tekton-results/Deployment/tekton-results-watcher resource.gvk="apps/v1, Kind=Deployment" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:openshift-gitops-argocd-application-controller","tekton-results:tekton-results-info"] uid=15b93e69-e3f9-4673-b3fc-3cd1e9e394c8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:13:07Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-results-watcher-5c79dd5644-kvcsj namespace=tekton-results operation=CREATE policy=restrict-docker-io-images resource=tekton-results/Pod/tekton-results-watcher-5c79dd5644-kvcsj resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=5ba054d5-2fae-469a-9bfe-f6c0a6b0f408 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=a08e8af0-86c5-46c5-9471-9689623edb7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"0af22286-4e33-42d5-815b-931e629fb17a","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2 2026-09-25T22:13:59Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="apps/v1, Kind=StatefulSet" gvr="apps/v1, Resource=statefulsets" kind=StatefulSet logger=webhooks/resource/validate name=affinity-assistant-f7eb8a7cb4 namespace=chains-e2e-kzcq operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kzcq/StatefulSet/affinity-assistant-f7eb8a7cb4 resource.gvk="apps/v1, Kind=StatefulSet" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=3904f039-b45b-4a8d-9ec6-e2775c176bb2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=663541bd-2fc6-472e-bc19-b82675578609"],"authentication.kubernetes.io/node-name":["ip-10-0-153-198.ec2.internal"],"authentication.kubernetes.io/node-uid":["f1af0332-8dcf-4f95-a247-3ec59e31748c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["8b43dd68-97ea-4abf-a293-a0d7b5191e23"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:13:59Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:statefulset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=affinity-assistant-f7eb8a7cb4-0 namespace=chains-e2e-kzcq operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kzcq/Pod/affinity-assistant-f7eb8a7cb4-0 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=e1cd26cb-5329-443a-b65d-3dceef62929a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=e40f71ff-be2d-4039-b792-438b3e337e4f"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"2a5d4851-9e69-40fd-b9b9-64407ffafe22","username":"system:serviceaccount:kube-system:statefulset-controller"} v=2 2026-09-25T22:14:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-lrxiuauhxu-init-pod namespace=chains-e2e-kzcq operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kzcq/Pod/buildah-demo-lrxiuauhxu-init-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=440a753f-1e7b-4cb0-8ea4-01ec89c767ea user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:14:15Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-lrxiuauhxu-clone-repository-pod namespace=chains-e2e-kzcq operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kzcq/Pod/buildah-demo-lrxiuauhxu-clone-repository-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=534093bc-13da-4c47-8395-1c0d295e3535 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:14:17Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-k9rqr namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-k9rqr resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=916c5801-8e7c-4a95-96ea-b0777439787e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=a08e8af0-86c5-46c5-9471-9689623edb7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"0af22286-4e33-42d5-815b-931e629fb17a","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2 2026-09-25T22:14:43Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-lrxiuauhxu-prefetch-dependencies-pod namespace=chains-e2e-kzcq operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] rules=["set-task-resources"] uid=6c15151f-270d-4630-8cfc-98ebce63fdeb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:14:43Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-lrxiuauhxu-prefetch-dependencies-pod namespace=chains-e2e-kzcq operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] rules=["set-task-resources"] uid=190ccda5-0fa6-40d5-9a5c-f587d4fe39c4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:14:43Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-lrxiuauhxu-prefetch-dependencies-pod namespace=chains-e2e-kzcq operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kzcq/Pod/buildah-demo-lrxiuauhxu-prefetch-dependencies-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=8414a7f6-9641-4442-b206-89c8f8de785e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:14:47Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-cq54m namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-cq54m resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=a194ab19-d02c-4e27-83fa-e4260652e909 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=a08e8af0-86c5-46c5-9471-9689623edb7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"0af22286-4e33-42d5-815b-931e629fb17a","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2 2026-09-25T22:14:59Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-lrxiuauhxu-build-container-pod namespace=chains-e2e-kzcq operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kzcq/Pod/buildah-demo-lrxiuauhxu-build-container-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=cac6823e-6541-44bb-9129-ab37bff19cbc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:15:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29839575 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29839575 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=7e9c2a01-6739-4e78-bfb6-c608fe4222e5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=842c4ac7-fa5d-4d8d-a392-a0572f6ca6ac"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"4b591fdc-82c7-4520-a4aa-42c2023c01da","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2 2026-09-25T22:15:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29839575-t2hwb namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29839575-t2hwb resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=05aa2939-87a4-4e85-be69-4d1e7f6d9e87 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=8c620a6a-dfc5-4669-a303-f11232e6e103"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"c9830044-0e1b-4cd9-b84e-9b911bb2ed1d","username":"system:serviceaccount:kube-system:job-controller"} v=2 2026-09-25T22:15:17Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-644j4 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-644j4 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=e2bd92fd-9d8f-433f-b9d8-89b868916ec0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=a08e8af0-86c5-46c5-9471-9689623edb7f"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"0af22286-4e33-42d5-815b-931e629fb17a","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2 2026-09-25T22:16:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=09e52ddf-d170-4b9b-a0a0-2ec16f39bd09 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:16:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=integration-init-ns-integration namespace= operation=UPDATE uid=cd22fc0a-7967-4350-ab53-38b322783648 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:16:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=ac2caa48-3b01-4ea5-a0c9-8465822fe511 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:16:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=06e4f272-0cc1-4a03-8dee-bf170a908586 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:16:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=9b695e37-a614-4104-b8e0-1a38d178b70a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:16:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=10b2ff8d-a1cb-474f-a83d-5a16e5fdea88 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:16:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=098ed986-e67d-4a84-9992-6d454652d831 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:16:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=5cfb5b5c-23ec-47b9-8c50-0dd17fbbdb6d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:16:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=f8097629-dab6-4192-90e1-14e8cef3fe92 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:16:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=795045b2-d1d0-4fd1-8d32-2ca90821eccf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:16:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=54a5a196-7ccc-473e-ab21-6b605e4554e2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:16:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=cbbf8140-c9eb-477d-b999-b13d03ab0733 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:16:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=9140abec-44f6-4322-9b0e-13595d4665d7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:16:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=8c3ad502-468d-4e3d-84c4-039d3c538e8d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=c1d48381-678a-47e5-8667-e9c550276b12"],"authentication.kubernetes.io/node-name":["ip-10-0-162-217.ec2.internal"],"authentication.kubernetes.io/node-uid":["fcf82ac4-982a-49eb-a8f1-eb3093c00181"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["03ef81a3-969b-4d61-ac97-c4b0466ab177"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"970b9632-e966-47cc-8b43-3f207aaf8e3f","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2 2026-09-25T22:17:06Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-lrxiuauhxu-build-image-index-pod namespace=chains-e2e-kzcq operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kzcq/Pod/buildah-demo-lrxiuauhxu-build-image-index-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=c264646d-667d-4224-a8ba-df693209f2ab user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:17:48Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-lrxiuauhxu-apply-tags-pod namespace=chains-e2e-kzcq operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kzcq/Pod/buildah-demo-lrxiuauhxu-apply-tags-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=9b3fa8b4-35be-422b-b1e8-3fd71408e911 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=663541bd-2fc6-472e-bc19-b82675578609"],"authentication.kubernetes.io/node-name":["ip-10-0-153-198.ec2.internal"],"authentication.kubernetes.io/node-uid":["f1af0332-8dcf-4f95-a247-3ec59e31748c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["8b43dd68-97ea-4abf-a293-a0d7b5191e23"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:17:48Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-lrxiuauhxu-push-dockerfile-pod namespace=chains-e2e-kzcq operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kzcq/Pod/buildah-demo-lrxiuauhxu-push-dockerfile-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=09a6d18d-ea30-4bc4-8a25-6b89ecb49c41 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=663541bd-2fc6-472e-bc19-b82675578609"],"authentication.kubernetes.io/node-name":["ip-10-0-153-198.ec2.internal"],"authentication.kubernetes.io/node-uid":["f1af0332-8dcf-4f95-a247-3ec59e31748c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["8b43dd68-97ea-4abf-a293-a0d7b5191e23"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:17:58Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-2d30f51677981c311cfadc32d7b47762-pod namespace=chains-e2e-kzcq operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] rules=["set-task-resources"] uid=d1bcbac7-c8c9-4e4a-90f0-8191b939ce26 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:17:58Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-2d30f51677981c311cfadc32d7b47762-pod namespace=chains-e2e-kzcq operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] rules=["set-task-resources"] uid=16aacbfd-4c57-4462-b3ce-efeebd0b5ad1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:17:59Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-2d30f51677981c311cfadc32d7b47762-pod namespace=chains-e2e-kzcq operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kzcq/Pod/verify-enterprise-contract-2d30f51677981c311cfadc32d7b47762-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=0719a4b5-cda1-4ad5-86e7-baff551199bb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:18:21Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-dd9dd3f965513e6ee20e59c9b1193123-pod namespace=chains-e2e-kzcq operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] rules=["set-task-resources"] uid=ac938f86-6f56-4e5e-8c7d-3775aec2ef23 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:18:22Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-dd9dd3f965513e6ee20e59c9b1193123-pod namespace=chains-e2e-kzcq operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] rules=["set-task-resources"] uid=46bfbe7e-4659-4c88-a063-e4dac5363fb0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:18:22Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-dd9dd3f965513e6ee20e59c9b1193123-pod namespace=chains-e2e-kzcq operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kzcq/Pod/verify-enterprise-contract-dd9dd3f965513e6ee20e59c9b1193123-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=da3dd596-59a6-4958-aa99-355d599cd7e5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:18:35Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-64c9eb0cdbb28864574fc6267dbbee50-pod namespace=chains-e2e-kzcq operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] rules=["set-task-resources"] uid=e5b155da-5aa9-44ef-af11-8179109fbbaf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:18:36Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-64c9eb0cdbb28864574fc6267dbbee50-pod namespace=chains-e2e-kzcq operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] rules=["set-task-resources"] uid=8b4e3909-362b-4ff2-a754-259d8bcd89f3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:18:36Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-64c9eb0cdbb28864574fc6267dbbee50-pod namespace=chains-e2e-kzcq operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kzcq/Pod/verify-enterprise-contract-64c9eb0cdbb28864574fc6267dbbee50-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=82e69ee9-f2f7-432e-b649-eaa668e7c6a8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:18:58Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-22320e6e785cdd2a94540afc52b306b4-pod namespace=chains-e2e-kzcq operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] rules=["set-task-resources"] uid=380a9760-8e4d-4223-b8e7-fdc1116cf5c9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=663541bd-2fc6-472e-bc19-b82675578609"],"authentication.kubernetes.io/node-name":["ip-10-0-153-198.ec2.internal"],"authentication.kubernetes.io/node-uid":["f1af0332-8dcf-4f95-a247-3ec59e31748c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["8b43dd68-97ea-4abf-a293-a0d7b5191e23"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:18:58Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-22320e6e785cdd2a94540afc52b306b4-pod namespace=chains-e2e-kzcq operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] rules=["set-task-resources"] uid=7cbd6036-e915-477b-8fc9-ba498f5f03bb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=663541bd-2fc6-472e-bc19-b82675578609"],"authentication.kubernetes.io/node-name":["ip-10-0-153-198.ec2.internal"],"authentication.kubernetes.io/node-uid":["f1af0332-8dcf-4f95-a247-3ec59e31748c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["8b43dd68-97ea-4abf-a293-a0d7b5191e23"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:18:58Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-22320e6e785cdd2a94540afc52b306b4-pod namespace=chains-e2e-kzcq operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kzcq/Pod/verify-enterprise-contract-22320e6e785cdd2a94540afc52b306b4-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=cbe6c723-4181-4534-ae00-02c0ef2376cf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=663541bd-2fc6-472e-bc19-b82675578609"],"authentication.kubernetes.io/node-name":["ip-10-0-153-198.ec2.internal"],"authentication.kubernetes.io/node-uid":["f1af0332-8dcf-4f95-a247-3ec59e31748c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["8b43dd68-97ea-4abf-a293-a0d7b5191e23"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:19:09Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-4a22caf6f7690a3371753c586d4b684d-pod namespace=chains-e2e-kzcq operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] rules=["set-task-resources"] uid=639c2a75-58c3-4a21-bdb6-d65121bb2aa0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:19:09Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-4a22caf6f7690a3371753c586d4b684d-pod namespace=chains-e2e-kzcq operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] rules=["set-task-resources"] uid=0a897490-36cc-44dd-b865-4f4ca3a1600d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:19:09Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-4a22caf6f7690a3371753c586d4b684d-pod namespace=chains-e2e-kzcq operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kzcq/Pod/verify-enterprise-contract-4a22caf6f7690a3371753c586d4b684d-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=1b695d1d-3570-4c25-8649-eb8c867d5e80 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:19:24Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-3916831641ad3b9c22f521d1e0c59696-pod namespace=chains-e2e-kzcq operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] rules=["set-task-resources"] uid=031fffb9-83dc-45ab-9f82-d190299cffb7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:19:24Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-3916831641ad3b9c22f521d1e0c59696-pod namespace=chains-e2e-kzcq operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] rules=["set-task-resources"] uid=0f983946-7058-44d7-a8de-5c088d826ad7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:19:24Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-3916831641ad3b9c22f521d1e0c59696-pod namespace=chains-e2e-kzcq operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kzcq/Pod/verify-enterprise-contract-3916831641ad3b9c22f521d1e0c59696-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=7c973a76-8906-42c3-8b2f-7aa6a7ba2687 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:19:43Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-6bd2c657c61d864b4118469f0f8d46af-pod namespace=chains-e2e-kzcq operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] rules=["set-task-resources"] uid=aa664876-4a5f-497f-934c-b21bf3a48cc8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=663541bd-2fc6-472e-bc19-b82675578609"],"authentication.kubernetes.io/node-name":["ip-10-0-153-198.ec2.internal"],"authentication.kubernetes.io/node-uid":["f1af0332-8dcf-4f95-a247-3ec59e31748c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["8b43dd68-97ea-4abf-a293-a0d7b5191e23"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:19:43Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-6bd2c657c61d864b4118469f0f8d46af-pod namespace=chains-e2e-kzcq operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] rules=["set-task-resources"] uid=e8f00e1f-26d7-422d-8b25-b2d9597b6d53 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=663541bd-2fc6-472e-bc19-b82675578609"],"authentication.kubernetes.io/node-name":["ip-10-0-153-198.ec2.internal"],"authentication.kubernetes.io/node-uid":["f1af0332-8dcf-4f95-a247-3ec59e31748c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["8b43dd68-97ea-4abf-a293-a0d7b5191e23"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:19:43Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-6bd2c657c61d864b4118469f0f8d46af-pod namespace=chains-e2e-kzcq operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kzcq/Pod/verify-enterprise-contract-6bd2c657c61d864b4118469f0f8d46af-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=8b530ead-b23b-46f8-8d12-b53aa8d80ed1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=663541bd-2fc6-472e-bc19-b82675578609"],"authentication.kubernetes.io/node-name":["ip-10-0-153-198.ec2.internal"],"authentication.kubernetes.io/node-uid":["f1af0332-8dcf-4f95-a247-3ec59e31748c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["8b43dd68-97ea-4abf-a293-a0d7b5191e23"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:20:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29839580 namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Job/osd-delete-backplane-serviceaccounts-29839580 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=8aeca11d-364f-422e-b652-fbf3bb1471b3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=842c4ac7-fa5d-4d8d-a392-a0572f6ca6ac"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"4b591fdc-82c7-4520-a4aa-42c2023c01da","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2 2026-09-25T22:20:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29839580 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29839580 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=ae8e721a-2775-40b2-b0c9-21395d9448bf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=842c4ac7-fa5d-4d8d-a392-a0572f6ca6ac"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"4b591fdc-82c7-4520-a4aa-42c2023c01da","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2 2026-09-25T22:20:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29839580-jf59k namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29839580-jf59k resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=57697f85-ea59-4236-8509-b413f96ec9cc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=8c620a6a-dfc5-4669-a303-f11232e6e103"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"c9830044-0e1b-4cd9-b84e-9b911bb2ed1d","username":"system:serviceaccount:kube-system:job-controller"} v=2 2026-09-25T22:20:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29839580-qhvkw namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Pod/osd-delete-backplane-serviceaccounts-29839580-qhvkw resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=4c5524f8-b8ab-43f5-9068-4b1e990623fa user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=8c620a6a-dfc5-4669-a303-f11232e6e103"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"c9830044-0e1b-4cd9-b84e-9b911bb2ed1d","username":"system:serviceaccount:kube-system:job-controller"} v=2 2026-09-25T22:20:09Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-1f20ad58c2893438302b0b5ed9005de8-pod namespace=chains-e2e-kzcq operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] rules=["set-task-resources"] uid=dd289eeb-45e0-40d1-b525-cfc0f5bdec84 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=663541bd-2fc6-472e-bc19-b82675578609"],"authentication.kubernetes.io/node-name":["ip-10-0-153-198.ec2.internal"],"authentication.kubernetes.io/node-uid":["f1af0332-8dcf-4f95-a247-3ec59e31748c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["8b43dd68-97ea-4abf-a293-a0d7b5191e23"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:20:09Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-1f20ad58c2893438302b0b5ed9005de8-pod namespace=chains-e2e-kzcq operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] rules=["set-task-resources"] uid=bef5fb8c-ccdc-468e-9987-d6330090af89 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=663541bd-2fc6-472e-bc19-b82675578609"],"authentication.kubernetes.io/node-name":["ip-10-0-153-198.ec2.internal"],"authentication.kubernetes.io/node-uid":["f1af0332-8dcf-4f95-a247-3ec59e31748c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["8b43dd68-97ea-4abf-a293-a0d7b5191e23"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:20:09Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-1f20ad58c2893438302b0b5ed9005de8-pod namespace=chains-e2e-kzcq operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kzcq/Pod/verify-enterprise-contract-1f20ad58c2893438302b0b5ed9005de8-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=1a1d84c2-7a93-4eac-a1c3-82a97901fd45 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=663541bd-2fc6-472e-bc19-b82675578609"],"authentication.kubernetes.io/node-name":["ip-10-0-153-198.ec2.internal"],"authentication.kubernetes.io/node-uid":["f1af0332-8dcf-4f95-a247-3ec59e31748c"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["8b43dd68-97ea-4abf-a293-a0d7b5191e23"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:20:25Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-4781601326077992fbf1f8151b7c2628-pod namespace=chains-e2e-kzcq operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] rules=["set-task-resources"] uid=5bead0b2-7997-4d06-8caa-dee5910de368 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:20:25Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-4781601326077992fbf1f8151b7c2628-pod namespace=chains-e2e-kzcq operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] rules=["set-task-resources"] uid=e2c92242-d966-4e35-a282-3b739d67c88d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2 2026-09-25T22:20:25Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-4781601326077992fbf1f8151b7c2628-pod namespace=chains-e2e-kzcq operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kzcq/Pod/verify-enterprise-contract-4781601326077992fbf1f8151b7c2628-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader","tekton-results:tekton-results-info"] uid=ba4da164-81f0-4ec5-a211-e09bbd356e1e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=de11fedf-4342-43f2-a137-2e11e240430b"],"authentication.kubernetes.io/node-name":["ip-10-0-138-0.ec2.internal"],"authentication.kubernetes.io/node-uid":["915f4f49-940f-4010-b7cc-73f9f778d3e8"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["2dda91f3-61bf-4ef6-a955-3c8a05751fc4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"47f13250-8580-437c-a170-9c35ea5a2bf2","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2