2026-10-01T02:14:39Z TRC kyverno/pkg/version/version.go:49 > version hash=--- logger=setup/version v=2 version=1.26.5
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > add_dir_header=false logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > admissionReports=false logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > allowHTTPInNamespacedPolicies= logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > allowInsecureRegistry=false logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > allowedResults=pass,fail,error,warn,skip logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderr=false logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderrthreshold=0 logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > apiCallTimeout=30s logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitEnabled=true logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitRatio=0.9 logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > autoUpdateWebhooks=true logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > backgroundServiceAccountName=system:serviceaccount:konflux-kyverno:kyverno-background-controller logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > caSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-ca logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerHost= logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerPort=9443 logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitBurst=200 logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitQPS=100 logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > controllerRuntimeMetricsAddress=:8080 logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > crdWatcher=false logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > disableCertManagerController=false logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > disableLogColor=false logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > disableMetrics=false logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > dumpPatches= logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > dumpPayload=false logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > enableConfigMapCaching=true logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > enableCosignLogging=false logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > enableDeferredLoading= logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > enablePolicyException=false logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > enableReporting= logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > enableTracing=false logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > enableTuf=false logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitBurst=2000 logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitQPS=1000 logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > exceptionNamespace= logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > excludeBootstrapResources=false logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > exemplarFilter=trace-based logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > forceFailurePolicyIgnore= logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > generateMutatingAdmissionPolicy= logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > generateValidatingAdmissionPolicy= logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > httpAllowlist= logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > httpBlocklist= logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > imagePullSecrets= logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheEnabled=true logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheMaxSize=1000 logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheTTLDuration=1h0m0s logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > kubeconfig= logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > leaderElectionRetryPeriod=26s logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > legacy_stderr_threshold_behavior=true logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > log_backtrace_at=:0 logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > log_dir= logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > log_file= logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > log_file_max_size=1800 logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingFormat=text v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingtsFormat=default v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag logtostderr=true v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAPICallResponseLength=2000000 v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAdmissionReports=1000 v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditCapacity=1000 v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditWorkers=8 v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxGlobalContextEntries=0 v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxQueuedEvents=1000 v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsCASecretName= v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsHost= v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsKeyAlgorithm=RSA v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsPort=8000 v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsRenewBefore=360h0m0s v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsServerIP= v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsTLSSecretName= v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag omitEvents=PolicyApplied,PolicySkipped v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag one_output=false v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelCollector=opentelemetrycollector.kyverno.svc.cluster.local v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelConfig=prometheus v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profile=false v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profileAddress= v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profilePort=6060 v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag protectManagedResources= v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag registryCredentialHelpers=default,google,amazon,azure,github v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag renewBefore=360h0m0s v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag reportsServiceAccountName= v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag resyncPeriod=15m0s v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag serverIP= v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag servicePort=443 v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_headers=false v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_log_headers=false v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag stderrthreshold=2 v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsKeyAlgorithm=RSA v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-pair v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingAddress= v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingCreds= v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingPort=4317 v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag transportCreds= v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufMirror=https://tuf-repo-cdn.sigstore.dev v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRoot= v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRootRaw= v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 vmodule=
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookRegistrationTimeout=2m0s
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerHost=
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerPort=9443
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookTimeout=10
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/maxprocs.go:12 > setup maxprocs... logger=setup/maxprocs v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/memlimit.go:13 > setup memlimit... logger=setup/memlimit ratio=0.9 v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/signal.go:16 > setup signals... logger=setup/signals v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-10-01T02:14:39Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformersBatchProcess logger=klog v=1
2026-10-01T02:14:39Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowCARotation logger=klog v=1
2026-10-01T02:14:39Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsPreferCBOR logger=klog v=1
2026-10-01T02:14:39Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowTLSCacheGC logger=klog v=1
2026-10-01T02:14:39Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=WatchListClient logger=klog v=1
2026-10-01T02:14:39Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=AtomicFIFO logger=klog v=1
2026-10-01T02:14:39Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InformerResourceVersion logger=klog v=1
2026-10-01T02:14:39Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsAllowCBOR logger=klog v=1
2026-10-01T02:14:39Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformers logger=klog v=1
2026-10-01T02:14:39Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=UnlockWhileProcessingFIFO logger=klog v=1
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/configmap.go:36 > create metrics-config-controller... logger=setup/metrics-config-controller v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/configmap.go:52 > done creating metrics-config-controller logger=setup/metrics-config-controller v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/metrics.go:27 > setup metrics... collector=opentelemetrycollector.kyverno.svc.cluster.local creds= exemplarFilter=trace-based logger=setup/metrics otel=prometheus port=8000 tlsSecretName= v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/configmap.go:15 > create config-controller... logger=setup/config-controller v=2
2026-10-01T02:14:39Z INF kyverno/cmd/internal/metrics.go:159 > Starting HTTP metrics server address=[]:8000 logger=setup/metrics v=0
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-01T02:14:39Z TRC kyverno/pkg/config/config.go:433 > defaultRegistry configured defaultRegistry=docker.io logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:14:39Z TRC kyverno/pkg/config/config.go:449 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:14:39Z TRC kyverno/pkg/config/config.go:458 > excludedGroups configured excludeGroups=["system:nodes"] includeGroups=[] logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:14:39Z TRC kyverno/pkg/config/config.go:463 > excludeUsernames not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:14:39Z TRC kyverno/pkg/config/config.go:471 > excludeRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:14:39Z TRC kyverno/pkg/config/config.go:479 > excludeClusterRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:14:39Z TRC kyverno/pkg/config/config.go:495 > generateSuccessEvents configured generateSuccessEvents=false logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:14:39Z TRC kyverno/pkg/config/config.go:501 > successEventActions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:14:39Z TRC kyverno/pkg/config/config.go:525 > webhooks configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhooks="{\"namespaceSelector\":{\"matchExpressions\":[{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"kube-system\"]},{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"konflux-kyverno\"]}],\"matchLabels\":null}}"
2026-10-01T02:14:39Z TRC kyverno/pkg/config/config.go:539 > webhookAnnotations configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhookAnnotations="{\"admissions.enforcer/disabled\":\"true\"}"
2026-10-01T02:14:39Z TRC kyverno/pkg/config/config.go:545 > webhookLabels not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:14:39Z TRC kyverno/pkg/config/config.go:559 > matchConditions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:14:39Z TRC kyverno/pkg/config/config.go:580 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:14:39Z TRC kyverno/pkg/config/config.go:595 > maxContextSize not set, using default default=2097152 logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/configmap.go:31 > done creating config-controller logger=setup/config-controller v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/registry.go:18 > setup registry client... insecure=false logger=setup/registry-client secrets= v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/imageverifycache.go:10 > setup image verify cache... enabled=true logger=setup/image-verify-cache maxsize=1000 ttl=1h0m0s v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/client.go:60 > create kyverno client... burst=200 kubeconfig= logger=setup/kyverno-client qps=100 v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/client.go:68 > create dynamic client... burst=200 kubeconfig= logger=setup/dynamic-client qps=100 v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/client.go:84 > create apiserver client... burst=200 kubeconfig= logger=setup/apiserver-client qps=100 v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/client.go:76 > create metadata client... burst=200 kubeconfig= logger=setup/metadata-client qps=100 v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/client.go:92 > create the kyverno dynamic client... burst=200 kubeconfig= logger=setup/d-client qps=100 v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/client.go:100 > create the events client... burst=200 kubeconfig= logger=setup/events-client qps=100 v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/events-client/kube-client qps=100 v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/reporting.go:13 > setting up reporting... enableReporting= generate=false imageVerify=false logger=setup/setup-reporting mutate=false mutateExisiting=false v=2 validate=false
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/engine.go:62 > setup exception selector... enablePolicyException=false exceptionNamespace= logger=setup/exception-selector v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/engine.go:91 > setup config map resolver... enableConfigMapCaching=true logger=setup/configmap-resolver v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/engine.go:44 > setup engine... logger=setup/engine v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2beta1.GlobalContextEntry v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterPolicy v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.UpdateRequest v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Policy v=2
2026-10-01T02:14:39Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:208 > Starting metrics server logger=controller-runtime/metrics v=0
2026-10-01T02:14:39Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:247 > Serving metrics server bindAddress=:8080 logger=controller-runtime/metrics secure=false v=0
2026-10-01T02:14:39Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy source="kind source: *v1beta1.ValidatingPolicy" v=0
2026-10-01T02:14:39Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy source="kind source: *v1beta1.NamespacedMutatingPolicy" v=0
2026-10-01T02:14:39Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy source="kind source: *v1beta1.MutatingPolicy" v=0
2026-10-01T02:14:39Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy source="kind source: *v1beta1.ImageValidatingPolicy" v=0
2026-10-01T02:14:39Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy source="kind source: *v1beta1.NamespacedImageValidatingPolicy" v=0
2026-10-01T02:14:39Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy source="kind source: *v1beta1.NamespacedValidatingPolicy" v=0
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.PolicyException v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedGeneratingPolicy v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.GeneratingPolicy v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Namespace v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRoleBinding v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.RoleBinding v=2
2026-10-01T02:14:39Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:258 > Attempting to acquire leader lease... lock=konflux-kyverno/kyverno logger=klog v=0
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=kyverno-events v=2 workers=3
2026-10-01T02:14:39Z TRC kyverno/pkg/event/controller.go:125 > start logger=EventGenerator v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=global-context v=2 workers=1
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/controllers name=policycache-controller v=2 workers=3
2026-10-01T02:14:39Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:272 > Successfully acquired lease lock=konflux-kyverno/kyverno logger=klog v=0
2026-10-01T02:14:39Z TRC kyverno/pkg/leaderelection/leaderelection.go:82 > started leading id=kyverno-admission-controller-576ff55549-6sqm7 logger=setup/leader-election v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/kyverno/main.go:335 > MutatingAdmissionPolicy API is not registered, skipping MAP informers error="mutating admission policy API is not registered" v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicy v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Lease v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicyBinding v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.PolicyException v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.MutatingWebhookConfiguration v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingWebhookConfiguration v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRole v=2
2026-10-01T02:14:39Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=exception-webhook-controller v=2 workers=1
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=status-controller v=2 workers=3
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=admissionpolicy-generator v=2 workers=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=global-context-webhook-controller v=2 workers=1
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=webhook-controller v=2 workers=2
2026-10-01T02:14:39Z TRC kyverno/pkg/utils/controller/run.go:20 > starting ... logger=admissionpolicy-generator v=2
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=certmanager-controller v=2 workers=1
2026-10-01T02:14:39Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=celexception-webhook-controller v=2 workers=1
2026-10-01T02:14:39Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-01T02:14:39Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-01T02:14:39Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-01T02:14:39Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-01T02:14:40Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-10-01T02:14:40Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-10-01T02:14:40Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0
2026-10-01T02:14:40Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0 worker count=1
2026-10-01T02:14:40Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0
2026-10-01T02:14:40Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0
2026-10-01T02:14:40Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0
2026-10-01T02:14:40Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0 worker count=1
2026-10-01T02:14:40Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0 worker count=1
2026-10-01T02:14:40Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0 worker count=1
2026-10-01T02:14:40Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0
2026-10-01T02:14:40Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0 worker count=1
2026-10-01T02:14:40Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0
2026-10-01T02:14:40Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0 worker count=1
2026-10-01T02:14:42Z INF kyverno/pkg/logging/log.go:180 > 2026/10/01 02:14:42 http: TLS handshake error from 10.129.0.2:57162: secret "konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-pair" not found logger=webhooks/server v=0
2026-10-01T02:18:08Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=CREATE uid=d16c10a3-f9bb-4a69-b842-bd463f64cd7e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=CREATE uid=8981e2df-2c2a-4d81-9e51-05299fd91335 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=CREATE uid=217f0fb1-9f48-4a14-8190-d539c186941e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=CREATE uid=2ee977c8-38c8-48ad-89ea-1dcf620a7f1e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=CREATE uid=daf63034-4fb6-4d15-868a-3470659f994c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=CREATE uid=285b2eae-042f-43de-80a7-e082dd2d7332 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress type=ClusterPolicy v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress uid=7ce01de2-c167-461d-a9a2-1aa791ad2cdb v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=CREATE uid=7ae6c77e-911e-468b-94df-435ad1a55370 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-kubearchiveconfig uid=cdd4e909-b951-47c0-957a-fb87876bfdf0 v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-kubearchiveconfig type=ClusterPolicy v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole type=ClusterPolicy v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole uid=62472758-71ed-421b-b3df-7d02d17526fa v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=CREATE uid=2bf81986-f67a-4f74-a517-a5e0cf376cd5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring uid=02ce93df-aa6a-48af-a0fb-69925ab2cda0 v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring type=ClusterPolicy v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace uid=00b442d9-32ec-4b91-ad7d-089152234d93 v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-rbcm uid=e18e28ea-da00-4fe6-8025-fff62e648735 v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace type=ClusterPolicy v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-rbcm type=ClusterPolicy v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=CREATE uid=97c609bb-f565-487f-b4a6-99e98ff0bece user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-olm type=ClusterPolicy v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-olm uid=85771574-c167-45e4-870e-86938bd5fa0b v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-integration type=ClusterPolicy v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-integration uid=42ca13a8-5368-415f-964e-9447df52ecae v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-generate-konflux-viewer-access uid=09154b8e-a4d4-4d9b-a789-63ba1ae00ced v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-generate-konflux-viewer-access type=ClusterPolicy v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=CREATE uid=0d5b8b5e-89fa-40c4-b135-711e388a5c17 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=CREATE uid=d7a07246-01ce-4bce-9bfc-0baf98991e26 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-sysauth-releng type=ClusterPolicy v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-sysauth-releng uid=559afd3f-aefb-4bae-91eb-245fe45f6fae v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-system-authenticated uid=0122864f-77f3-4f48-99cc-685e66a41145 v=2
2026-10-01T02:18:08Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-system-authenticated type=ClusterPolicy v=2
2026-10-01T02:18:08Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-sysauth-releng\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-sysauth-releng status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-01T02:18:08Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-system-authenticated\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-system-authenticated status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-01T02:18:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=CREATE uid=bb1dd088-7c96-4114-9a5b-d3b2798840c8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=CREATE uid=1e40fa6f-608b-4694-b4e8-9ea9a2fa54ed user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:09Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-docker-io-images uid=5a520a13-e7ae-490e-8588-d51a4a4efa1c v=2
2026-10-01T02:18:09Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-docker-io-images type=ClusterPolicy v=2
2026-10-01T02:18:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=CREATE uid=c671fde2-d1ff-466a-bf75-8d62ee13eccf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:09Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=tekton-taskrun-resource-policy uid=d0a1ec2c-7836-438c-948e-dfe2137e1bb3 v=2
2026-10-01T02:18:09Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=tekton-taskrun-resource-policy type=ClusterPolicy v=2
2026-10-01T02:18:09Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-binding-system-groups type=ClusterPolicy v=2
2026-10-01T02:18:09Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-binding-system-groups uid=db099a20-bda0-4eda-a8d7-a3eb68ad7422 v=2
2026-10-01T02:18:09Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-binding-system-groups\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-binding-system-groups status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-01T02:18:10Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=1951db64-e2ce-4165-af7e-9f18f0d0143f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:10Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=6b224f41-52ab-4634-b26a-38362f9f4054 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=588a14be-6830-4f80-bca1-ae6392df661c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=c8cf3567-a586-41b4-85d2-8808e8b5a140 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=fb9c521d-d103-445d-a44d-09969ad0b431 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=c523203a-ae02-4083-995a-d458f9cbff5e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=725b357c-6d18-4bf2-ad3b-3aa788eb7d15 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=f6cd0a9c-c6cd-4d86-9065-b4887a25b8e5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=69549263-9c06-4cb3-8b25-720ec31accbf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=e043dee6-cdff-4bb6-affa-07388cda9b19 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=460b2513-6b99-45b7-96bf-35c2a392616f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=684897d7-281f-4ffc-a217-6151532b02ec user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=5b1d451d-6a94-4b43-a018-7251a0b6935c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=af32daae-1edf-42db-add3-3dbac4d36d9e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=68d097cc-bcef-49f0-aab8-4e864865e235 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:12Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=92ea8f37-6808-429e-9069-f70db446033e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=7c726996-8cc6-45ac-afbd-a8df0d507a55 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=1577b67e-cf3a-4daa-90e2-13b3f812ab6e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=083ee156-4e50-4de9-ba74-4b27ac829616 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:14Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=4c40fbe3-7e71-493f-a5fa-a442131463dd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=141e2d8e-2e11-4497-8932-55ee93d5e505 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=0f1cea60-8663-40ad-8380-28271f1cadc3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=aa2da216-88a2-41cc-ae6d-60866de65430 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=abcb35af-f0ae-413f-8ddc-184358084dd4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=8efc2d63-de95-4ab7-a628-c3691ad2788a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=462e6769-6953-4fba-8d41-a15b56ebacbd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=da728dd4-eda6-40d3-a1bb-19a8eb48855c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=6e394de2-6535-4960-84d7-38ab94ba6f79 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=af492a48-6ed5-4f4a-8a45-dc46d3c1adbf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=432209d0-89c3-42b5-b1cc-d0d906cb9a5c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=e2a3ca85-9526-4d4b-a54e-c4dbc0d4bb7f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=71e8efe4-808d-478b-9f5b-8cad51c11b65 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=5d3ad61e-c584-49d6-8f5a-a62b742e0012 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=3874af31-b59a-4d45-9667-153e49746e2a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=0be8e943-fe05-4ddc-b626-c7cab1368512 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=f227de56-f7ac-40bc-8a6e-fc1fa7db5cd5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=995db71a-d552-4112-873f-39e17a517450 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=7d81e389-891d-4a42-8afb-22bf138d284b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=19e1e7b5-e6e9-4a3f-85bb-144213942be5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=d61082c1-d03d-45c4-9be5-3f4540ca4b10 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=ddd2b162-912b-4d89-8ad8-824a5dd43f77 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=d6d1c74c-0c29-47ae-ba25-74f981b62c73 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=515a8c81-e545-4038-8809-aa9537edb57d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=806ad363-307e-4507-9039-d17c1d3d9c09 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=7e9efe69-9ac0-43e4-a0af-9c4777d448ac user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=4ff83c9b-e36a-456c-9e9a-2046273ddde4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=d6c335bc-ba39-406b-8107-0b5029fac482 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=6f2c9a89-1d7f-4527-b53f-a0810262762f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=526f94f1-78c9-4a21-a00a-1caa07533806 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=7ecc54f5-9f92-4039-aa4f-092373775636 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=c0f8cce5-de5e-4f6e-abeb-c64b2accb41a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=4c2df8eb-64b2-40ec-944d-066a6aa4a65e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=909d9ce9-8700-4d60-9bb2-c17fdfd1d476 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=2577eaa3-bd7c-4345-941d-eb10c2281a92 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=9ae0dfde-0ee3-4b8b-9c50-9ba1bc077d7a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=29e5d5df-63a4-46a7-aa60-1aa59f7e9224 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=b84a0fe1-4bc6-44cb-a9d4-b7c7e720b0b9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=7a3c5707-2613-4ff6-8fc1-cb09e5a6fbfd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=c488605f-cb5e-4aaa-9f25-e7cad0c72f96 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=67864f0e-1083-4419-ad33-0756620ca70d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=f27c2231-f74e-4e93-8c99-b25f9766a5b1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=153c77ad-38a2-4a89-92be-4f7a5aa3ce82 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=52d2ed11-b181-4643-9ba2-028d2988f506 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=ac408f6c-af01-4b84-9e76-0e7df60716c4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=40a2d821-bdaf-4dc2-aff1-270510cae92f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=af372e0e-ccfa-4c71-9355-87ceee6a59e1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=a1449315-b6ca-4dd6-9992-7364b8a978ae user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=c9524d79-3914-4938-823b-769f66a99ad1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=13f43eec-115b-43df-bc28-435b93a12dea user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=b8c3a445-7927-483a-bb17-7b234809a3bd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=8b6640e2-d6cf-40df-b606-3936f48ac169 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=88bac9fc-82a4-42cb-9257-24b9a9d951e6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=0fdb0067-648e-433f-8c48-abd0a72fa03f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=0c8cf160-98ce-47a1-b10b-bd3a3af11c1a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=1368e82a-4f1a-44a2-8bff-529a38e93b7a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=7e26a209-22ff-4bb5-a1ad-87968536697d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=993edb8c-a819-487f-b45a-96b10970a37a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=4f6ff73c-07dc-4c94-8a5b-f52079372d77 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=7c425a2b-35a9-416a-94d5-b6df1934038e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=8c287bf1-40a7-4a48-b6f2-10383ac81f0e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=776a06ea-d741-4423-8c4e-42d73d58eb28 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=a4f24bf6-343a-4270-a2a9-74626b6b2945 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=61986c08-0bcd-42e0-8ed8-e77d1601bb11 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=7b3d03e6-ad43-4e0f-971e-934e6c0db9a0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=e4a7690a-f776-4e71-bf6c-8f0aa9a142c1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=b927a819-c6b5-4b29-a5d4-b48a4b795224 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=9add735d-d2bf-4498-ba21-3a8fc1af494b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=219b6f0b-efa9-4ccd-b36e-9037ad5e6919 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=76d23e31-02f2-43eb-8607-e3b9cbccfc39 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=dc2c514b-a79d-4942-a5d3-7d95dd0ad444 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=9f09f1a8-86d6-466c-b902-db63f076443c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=d82fcde2-6e2e-4f21-8920-4210144c413b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=e023d746-4fc7-436a-a78b-a00fd5a1cac6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=7980e943-f6c2-4c9e-bf49-19f411563eb9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=666f303a-1d3a-42c1-8c07-0ac139990a90 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=b47a05a7-ab69-43c1-a480-f8f62a5b6d7c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=46526a12-ef30-41a4-9f49-2a61a7ba5ce6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=829bd50f-91e8-4dd6-a821-66a8600cbce3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=a37b3c37-b8af-489a-95ec-b8248f65f10a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=CREATE uid=fd1846df-b7cf-40cf-a65d-7926029ddd5f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:22Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=bootstrap-tenant-namespace-queue uid=8bfefbf3-286a-4fda-b61b-59dd3ef5e8ac v=2
2026-10-01T02:18:22Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=bootstrap-tenant-namespace-queue type=ClusterPolicy v=2
2026-10-01T02:18:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=78526591-704c-40c3-b270-56e28d7b40e8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=574707c6-37c9-4e9a-ab74-f0f5606d6025 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=7a1692b6-d21d-4245-94c0-dbc08718e036 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=9091f980-cff7-401c-8981-32784e1e0152 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=3ec8d788-d2ab-4146-993e-ece22db33491 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:24Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=fc2ce20e-eb0b-413d-ab50-e9e1670c556b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:24Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=204b4d48-db6b-4486-9bb6-c299d966cc51 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:24Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=39fb2588-d4e5-4ad0-bf26-ef12ccc63913 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:24Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=5d1ea6c3-cfcb-4373-bee2-1fb7ddcfdd78 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:24Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=dd74f868-ec4c-43e7-8456-be71db63745d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:24Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=adec7c5b-6d59-4dfd-a9ee-fda194f1cd7e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:24Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=da311842-bb23-40de-b4a1-5d4e2c2b40b7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:24Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=16942d88-ab32-4689-8188-5d18c0e049ce user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:24Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=8b05a903-3ba0-4bc8-a958-54ae89f25e9b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=e11b1f88-3f68-4bed-aad1-82b31e7befb4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=4706e69e-d941-4b8d-a92e-885ee1650f6b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=3edcb48f-1433-4211-b38e-f123f37d3822 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=6ba0333f-fb51-4512-a1a6-3c7354738623 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=0425ad97-6b5f-4158-8f6b-cfefe9addfd9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=52be91b6-6a3f-4b6e-a0b4-0d0403de4f5a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=89b6c970-68f9-4ada-afbd-4ea2aff984ce user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=dd043609-943b-40ef-9ccf-4b3405b23eda user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=c88bf4f5-a10c-4aa6-ae1d-45583697330b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=91580a87-3ba1-4e38-bc05-aba3dfb6915a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=a26e6dc5-8585-4344-865c-927257602b8a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=579347c3-b741-4f03-b71f-59dfe2248609 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=b2f5e6d2-4002-4c26-ab4b-3be1de310355 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=a5e4c7f9-9d54-497e-aec8-d6c295449900 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=1c4e5abb-c07a-4d5d-962e-44401c662307 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=a602c340-8d5d-40a4-94da-2318e828516d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=adfe58de-c1a0-4e1e-b82f-9eb22a73fbcd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=bda9147a-bd69-4049-bbe1-42cb4f5317bc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=dab04aec-c871-452d-a285-cb193d316c9b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=b8306ac4-ce1b-4f98-ab07-3c270ee2122b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=12ee62b4-c345-4742-b547-a220d546dbcd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=580dbe54-d3b9-4902-9ed3-13e14b605733 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=fe21fcf5-74ae-498e-99ac-11610419d176 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=1b931408-2a53-4ef5-8b28-f43266e67e21 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=c5b3f6fd-04ef-4f11-b457-300e1c590151 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=0a7d6246-87ad-479e-a138-404a5b4e54f4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=c4228f9f-00a1-4f3e-bd70-994c93b7bb0d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=5b56a026-a574-4dee-9e87-74e35c309eec user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=ad505799-014f-4e07-a04f-a446e1db4067 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=08da3044-5184-426b-bd41-71a631b40fbd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=359a3973-2c43-4b8e-bef1-f7dc1276cf51 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=c3322278-b941-4917-834a-4ef16ad2f0b7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=d0c4702d-715c-48f8-b8ea-001dc3301edd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=abe94612-c1e3-4776-b7a9-a80d47b67a1b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=d31af853-e18f-4e51-850d-0802bf9aab04 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=562687b5-28b7-470a-b134-45e1d7907b7a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=86d9f670-3ed0-4311-8508-32fa4b489cb9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=3cf285f5-d5ec-4277-88bf-ed92e8fd4a31 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=bcbbc30a-cdb6-4d52-87e4-bb7d203ff49d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=174e0ac8-be85-442b-aaa6-36e44188b995 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=9254c0e9-c28b-4356-93e6-7c6d3f17fd8b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=0117c748-be25-4bf7-868e-20a3872f45f7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=c037ddb3-3e6f-48bc-b855-51a01b2e798f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=3acfda84-2267-481c-b722-31096e6fdc4c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=ea19e2d9-345a-4633-889a-f32adb3a8664 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=b07746d4-5ae4-4e01-8074-ee03b7c200dd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=9e5acfbf-b46c-4339-90dc-6ff353288065 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:31Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=f3d922c3-2c5e-4288-96b1-f7e9cf6e728c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=73959a46-9da0-441d-8c9f-39811b3fedcf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=e57eae44-4711-438b-a728-befbec177758 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=7e3f7a61-8180-49b0-890c-738d3bd6c08b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=219b3d21-0ffc-4a35-94b6-bfe409f4e7c8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=de62aabd-9427-4a71-bbea-ce6c10a841ce user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=6e666f8e-ff35-4f90-be94-3ab7d1fe41b7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=05922cf7-0989-477f-80c5-d8659bcfe72b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=07974bd7-50fc-460d-9c77-4bae5df79d5e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=5db62cda-03c0-43c5-831e-32a66d169f4b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=3d5cb205-f416-4b49-b8d8-d0cd177b9002 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=e1856c67-f8a5-4d1e-a727-84fbf6752250 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=5538de25-ddb1-4df1-b5c8-045b192e0767 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=05b469c0-28c7-478c-9c6d-42a4710c3a86 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:18:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=1a896404-2860-48a2-a3ba-b4484d9ef1bc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:20:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29847020 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29847020 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=618e138c-fb3a-4bf3-aabf-2930343beb7f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b599eaae-676f-4940-bb30-962d25acd74e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"6babd445-4dde-4747-b6b7-34b2b4e60175","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-01T02:20:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29847020 namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Job/osd-delete-backplane-serviceaccounts-29847020 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=0dc4294d-0c3a-4d74-997b-9f96d2baf2f6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b599eaae-676f-4940-bb30-962d25acd74e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"6babd445-4dde-4747-b6b7-34b2b4e60175","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-01T02:20:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29847020-xcdqw namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29847020-xcdqw resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=0474388a-5933-4ddb-b4ee-a386522ad93a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b0f46b6-d380-4a90-8e5d-4393de2ae8c3"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3fe9f705-09c2-4eeb-aa63-26e17577ec67","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-01T02:20:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29847020-b87cx namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Pod/osd-delete-backplane-serviceaccounts-29847020-b87cx resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=4b4da415-9b2c-4157-ad51-36a2b879bf62 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b0f46b6-d380-4a90-8e5d-4393de2ae8c3"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3fe9f705-09c2-4eeb-aa63-26e17577ec67","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-01T02:20:08Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-project-controller","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=create-minio-bucket namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Job/create-minio-bucket resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=b90e4c2f-de3f-4977-a607-45097744c773 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:20:08Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-project-controller","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=tekton-chains-signing-secret namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Job/tekton-chains-signing-secret resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=00e8ba7e-513a-4766-bce9-74a7d81832c3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:20:08Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=create-minio-bucket-7qbr5 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/create-minio-bucket-7qbr5 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=b8cafef3-91ee-4571-8be3-14789525532e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b0f46b6-d380-4a90-8e5d-4393de2ae8c3"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3fe9f705-09c2-4eeb-aa63-26e17577ec67","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-01T02:20:08Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-chains-signing-secret-vhntl namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-chains-signing-secret-vhntl resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=1c49dc0b-38f8-44c9-8ef1-e248a34d325a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b0f46b6-d380-4a90-8e5d-4393de2ae8c3"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3fe9f705-09c2-4eeb-aa63-26e17577ec67","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-01T02:23:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=4ccc2722-4183-4258-bc08-0aff482f48bc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:23:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=690ea684-ba60-4b34-bbe1-04b504a391e2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:23:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=fbf48376-3b17-43ee-80b0-810e9fa04eb2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:23:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=77b1152f-9c0a-4e78-a58f-f24f4f6311bf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:23:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=051cabbf-7b7b-475e-bae8-08169b9ca59e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:23:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=76e07394-4bc9-457c-9892-af44572f2eaa user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:23:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=02e1bd91-47b6-49b8-891f-5b0f465a2c33 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:23:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=53d33208-4877-42e0-9386-3d2ae151f924 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:23:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=d8babf30-ac24-4e84-83f8-8e4570997c41 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:23:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=67f18ede-3cec-466a-a085-185d2f95990e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:23:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=195a6a65-db06-4ee4-944e-de5c24183289 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:23:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=698323c2-d4d1-419b-a324-a3a7241cc0fd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:23:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=d73d3b1f-e840-4acb-9b1c-43903fb3905f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:23:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=725a2c00-fea6-447a-ad0c-f01cee58ea51 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:23:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=2eb11fb2-b84b-4727-b5f8-7fc485a1bae3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:24:17Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="apps/v1, Kind=StatefulSet" gvr="apps/v1, Resource=statefulsets" kind=StatefulSet logger=webhooks/resource/validate name=affinity-assistant-91e006769f namespace=chains-e2e-kfxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kfxv/StatefulSet/affinity-assistant-91e006769f resource.gvk="apps/v1, Kind=StatefulSet" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=7154ee06-1b6f-4852-895d-0883bc51af1f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=5e82ebda-42c2-4c87-904c-80506c981dc6"],"authentication.kubernetes.io/node-name":["ip-10-0-128-27.ec2.internal"],"authentication.kubernetes.io/node-uid":["47418516-b2f5-4bb3-8948-e95110a322dd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["a6c6f351-92b3-4478-9dbb-a37fb021b989"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:24:17Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:statefulset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=affinity-assistant-91e006769f-0 namespace=chains-e2e-kfxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kfxv/Pod/affinity-assistant-91e006769f-0 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=78990143-4993-4c53-ac0d-9c62e177f9b2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=4dd21749-b9e6-47db-8cf0-7c383196d403"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"18235eaf-e65d-402e-aceb-104dfb7dd03b","username":"system:serviceaccount:kube-system:statefulset-controller"} v=2
2026-10-01T02:24:17Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-sshfrlobfr-init-pod namespace=chains-e2e-kfxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kfxv/Pod/buildah-demo-sshfrlobfr-init-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=7077496a-a34c-4356-a2de-b3be599cb8fb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:24:33Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-57f89 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-57f89 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=d0ce1c90-9367-401d-a9a1-863f7663185f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=587367bb-d2f1-47c7-bf2f-e124f2a0850a"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"26ef208e-59b6-407a-9284-18ffa56a5af6","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-01T02:24:36Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-sshfrlobfr-clone-repository-pod namespace=chains-e2e-kfxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kfxv/Pod/buildah-demo-sshfrlobfr-clone-repository-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=4d5be65c-cc1b-4054-841c-41f30b5bad4b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:25:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29847025 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29847025 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=04e0119e-b4b4-48b5-ac7c-68e6a0df3527 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b599eaae-676f-4940-bb30-962d25acd74e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"6babd445-4dde-4747-b6b7-34b2b4e60175","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-01T02:25:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29847025-2b8bd namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29847025-2b8bd resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=908ccfcf-752c-473c-86f7-bcb309d39612 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b0f46b6-d380-4a90-8e5d-4393de2ae8c3"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3fe9f705-09c2-4eeb-aa63-26e17577ec67","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-01T02:25:02Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-sshfrlobfr-prefetch-dependencies-pod namespace=chains-e2e-kfxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=d11e70ff-548a-4949-bf7b-fb647ddd8395 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:25:02Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-sshfrlobfr-prefetch-dependencies-pod namespace=chains-e2e-kfxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=c6192063-7f95-43d2-9150-07e6699de9b3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:25:02Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-sshfrlobfr-prefetch-dependencies-pod namespace=chains-e2e-kfxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kfxv/Pod/buildah-demo-sshfrlobfr-prefetch-dependencies-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=ba8e9be0-0743-404e-ba47-6a8cf7fb0446 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:25:19Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-sshfrlobfr-build-container-pod namespace=chains-e2e-kfxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kfxv/Pod/buildah-demo-sshfrlobfr-build-container-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=51285cdf-115f-43c2-bfec-f2fe2363f2ee user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=5e82ebda-42c2-4c87-904c-80506c981dc6"],"authentication.kubernetes.io/node-name":["ip-10-0-128-27.ec2.internal"],"authentication.kubernetes.io/node-uid":["47418516-b2f5-4bb3-8948-e95110a322dd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["a6c6f351-92b3-4478-9dbb-a37fb021b989"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:25:33Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-nscjq namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-nscjq resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=1270f27c-571f-4531-a8d2-f4153c0cb15b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=587367bb-d2f1-47c7-bf2f-e124f2a0850a"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"26ef208e-59b6-407a-9284-18ffa56a5af6","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-01T02:26:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=6204d28f-e422-4d2d-9e0b-957492a001de user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:26:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=e6819332-5e6f-4dd7-a0ab-ac9ac73fb0ba user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:26:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=09a7c993-cc6b-4b73-b861-c1fc1e0f971f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:26:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=54755c9a-80a1-445f-abfb-f334d1b4c957 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:26:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=76cd2269-c9a9-4f20-bc70-2a1dc2635319 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:26:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=ee67e2f5-b5cc-4a89-a6e5-2d8cac377b8c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:26:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=e85a99e7-b4dd-46fe-b9ad-fc12efee0080 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:26:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=da275839-f36d-4704-a952-f8216ae386ff user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:26:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=2a77407a-3f95-47bb-8a5d-7490483eddd8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:26:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=fe7e6a30-2cb8-4c36-8072-82bdd6a5fab5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:26:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=7d22b6db-d505-4c9e-97d9-9f719f738635 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:26:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=0b70909e-b6c9-4724-942e-860e0ebb2b77 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:26:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=57a964db-12ce-43a4-b36b-abeb64d798f3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:26:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=1d2bdc74-1c30-4e91-aaf0-83284f639595 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:26:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=69700ffe-3579-4381-ac41-c597bc2717cd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:27:39Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-sshfrlobfr-build-image-index-pod namespace=chains-e2e-kfxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kfxv/Pod/buildah-demo-sshfrlobfr-build-image-index-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=a2b36856-d577-442a-933d-7125a0d91abf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:28:27Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-sshfrlobfr-apply-tags-pod namespace=chains-e2e-kfxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kfxv/Pod/buildah-demo-sshfrlobfr-apply-tags-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=8fb2e3bf-bb7b-4f3c-8dd7-3953791a970d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:28:27Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-sshfrlobfr-push-dockerfile-pod namespace=chains-e2e-kfxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kfxv/Pod/buildah-demo-sshfrlobfr-push-dockerfile-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=929e1ae9-a0c4-4925-a01c-1d3f8e241c54 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=5e82ebda-42c2-4c87-904c-80506c981dc6"],"authentication.kubernetes.io/node-name":["ip-10-0-128-27.ec2.internal"],"authentication.kubernetes.io/node-uid":["47418516-b2f5-4bb3-8948-e95110a322dd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["a6c6f351-92b3-4478-9dbb-a37fb021b989"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:28:41Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-b230b9b07552c7de6cdd5523c0b1ac68-pod namespace=chains-e2e-kfxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=f83fa9cf-8bbf-47a4-be67-2004ae22f233 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=5e82ebda-42c2-4c87-904c-80506c981dc6"],"authentication.kubernetes.io/node-name":["ip-10-0-128-27.ec2.internal"],"authentication.kubernetes.io/node-uid":["47418516-b2f5-4bb3-8948-e95110a322dd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["a6c6f351-92b3-4478-9dbb-a37fb021b989"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:28:41Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-b230b9b07552c7de6cdd5523c0b1ac68-pod namespace=chains-e2e-kfxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=10450994-9754-4fe7-8193-714d48b244a5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=5e82ebda-42c2-4c87-904c-80506c981dc6"],"authentication.kubernetes.io/node-name":["ip-10-0-128-27.ec2.internal"],"authentication.kubernetes.io/node-uid":["47418516-b2f5-4bb3-8948-e95110a322dd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["a6c6f351-92b3-4478-9dbb-a37fb021b989"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:28:41Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-b230b9b07552c7de6cdd5523c0b1ac68-pod namespace=chains-e2e-kfxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kfxv/Pod/verify-enterprise-contract-b230b9b07552c7de6cdd5523c0b1ac68-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=c6edaa8a-8c33-4ac9-abc5-d89c388fa225 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=5e82ebda-42c2-4c87-904c-80506c981dc6"],"authentication.kubernetes.io/node-name":["ip-10-0-128-27.ec2.internal"],"authentication.kubernetes.io/node-uid":["47418516-b2f5-4bb3-8948-e95110a322dd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["a6c6f351-92b3-4478-9dbb-a37fb021b989"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:28:49Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-4l9nt namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-4l9nt resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=2893e6ef-7a43-4bee-b5bb-aa11ac9a522a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=587367bb-d2f1-47c7-bf2f-e124f2a0850a"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"26ef208e-59b6-407a-9284-18ffa56a5af6","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-01T02:29:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=d3a924da-1a04-4945-8082-5b1494f24c78 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:29:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=4ec93c77-ff61-476e-94bc-fa8787446f0a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:29:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=0dfc0ef4-4437-4383-bf65-a8de76f9c2f6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:29:01Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=a7842a36-033e-4118-b589-558c65d28588 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:29:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=75c11313-092c-4e5a-822f-75890518df4e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:29:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=1dd3cf2c-3260-47fe-972b-4b435807b908 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:29:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=77f68191-704c-4044-b8db-a25a2eb7eff6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:29:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=8f48aeee-38f0-4f0a-a25a-c5783f872d11 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:29:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=a87a81ad-8659-4a37-a647-c61a2599e713 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:29:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=c488de6a-ed6a-4fa0-b89f-274f6f49f39b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:29:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=82c50d6d-21ae-4a7c-ac0b-2eed1c6e6abf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:29:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=ae40498b-2b8d-4d83-be2b-d375caf409eb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:29:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=d29be804-27b3-4314-b3ae-4953403828d7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:29:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=e1bbe2ba-2b90-42ee-b019-fee48269f5ae user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:29:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=85e78ee1-08ac-457e-943a-b87ff1599deb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:29:11Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-86653f8df325389c9514dae6c244ef39-pod namespace=chains-e2e-kfxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=d8a10255-817e-4a1e-adad-d69b4d64d7f5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:29:12Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-86653f8df325389c9514dae6c244ef39-pod namespace=chains-e2e-kfxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=91c8dc8e-23fd-4b15-a649-c31b1ce08d6b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:29:12Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-86653f8df325389c9514dae6c244ef39-pod namespace=chains-e2e-kfxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kfxv/Pod/verify-enterprise-contract-86653f8df325389c9514dae6c244ef39-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=26659bd6-d911-4905-a7aa-2e1f35356e06 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:29:30Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-31b556cdcc62334b7dc9d452b7aee78c-pod namespace=chains-e2e-kfxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=64d31ca4-674f-46ec-bd7e-2ce9bae8fb27 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=5e82ebda-42c2-4c87-904c-80506c981dc6"],"authentication.kubernetes.io/node-name":["ip-10-0-128-27.ec2.internal"],"authentication.kubernetes.io/node-uid":["47418516-b2f5-4bb3-8948-e95110a322dd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["a6c6f351-92b3-4478-9dbb-a37fb021b989"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:29:30Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-31b556cdcc62334b7dc9d452b7aee78c-pod namespace=chains-e2e-kfxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=76b1e545-0718-4411-a93d-0c57f62fda6c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=5e82ebda-42c2-4c87-904c-80506c981dc6"],"authentication.kubernetes.io/node-name":["ip-10-0-128-27.ec2.internal"],"authentication.kubernetes.io/node-uid":["47418516-b2f5-4bb3-8948-e95110a322dd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["a6c6f351-92b3-4478-9dbb-a37fb021b989"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:29:30Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-31b556cdcc62334b7dc9d452b7aee78c-pod namespace=chains-e2e-kfxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kfxv/Pod/verify-enterprise-contract-31b556cdcc62334b7dc9d452b7aee78c-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=aae3f2ad-b503-4a92-a29e-a5a4ecfadc5a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=5e82ebda-42c2-4c87-904c-80506c981dc6"],"authentication.kubernetes.io/node-name":["ip-10-0-128-27.ec2.internal"],"authentication.kubernetes.io/node-uid":["47418516-b2f5-4bb3-8948-e95110a322dd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["a6c6f351-92b3-4478-9dbb-a37fb021b989"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:29:46Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-32be16791f7a5bb64ab898fd4a0eced5-pod namespace=chains-e2e-kfxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=91bd2d13-123c-485e-aee0-fe88ecd4e565 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:29:46Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-32be16791f7a5bb64ab898fd4a0eced5-pod namespace=chains-e2e-kfxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=4d24aa9f-9fc6-48ef-9883-d6e3b879d5d4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:29:46Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-32be16791f7a5bb64ab898fd4a0eced5-pod namespace=chains-e2e-kfxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kfxv/Pod/verify-enterprise-contract-32be16791f7a5bb64ab898fd4a0eced5-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=f2d62696-2471-4737-a3fe-3c4373b03f91 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:29:58Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-756692f4d0753947474287dd36dee17d-pod namespace=chains-e2e-kfxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=11b2ccd9-fda2-44f6-ac66-fd0ebea6b377 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=5e82ebda-42c2-4c87-904c-80506c981dc6"],"authentication.kubernetes.io/node-name":["ip-10-0-128-27.ec2.internal"],"authentication.kubernetes.io/node-uid":["47418516-b2f5-4bb3-8948-e95110a322dd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["a6c6f351-92b3-4478-9dbb-a37fb021b989"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:29:58Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-756692f4d0753947474287dd36dee17d-pod namespace=chains-e2e-kfxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=d785d1c5-2b85-47bc-b5f3-199e84a5a80c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=5e82ebda-42c2-4c87-904c-80506c981dc6"],"authentication.kubernetes.io/node-name":["ip-10-0-128-27.ec2.internal"],"authentication.kubernetes.io/node-uid":["47418516-b2f5-4bb3-8948-e95110a322dd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["a6c6f351-92b3-4478-9dbb-a37fb021b989"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:29:58Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-756692f4d0753947474287dd36dee17d-pod namespace=chains-e2e-kfxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kfxv/Pod/verify-enterprise-contract-756692f4d0753947474287dd36dee17d-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=9d393abe-edec-46c7-86b4-2986983dca53 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=5e82ebda-42c2-4c87-904c-80506c981dc6"],"authentication.kubernetes.io/node-name":["ip-10-0-128-27.ec2.internal"],"authentication.kubernetes.io/node-uid":["47418516-b2f5-4bb3-8948-e95110a322dd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["a6c6f351-92b3-4478-9dbb-a37fb021b989"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:30:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29847030 namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Job/osd-delete-backplane-serviceaccounts-29847030 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=5c83397b-0a78-45df-a390-67551518f76b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b599eaae-676f-4940-bb30-962d25acd74e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"6babd445-4dde-4747-b6b7-34b2b4e60175","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-01T02:30:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29847030 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29847030 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=1d4e69d6-6ecc-4bfc-a11e-09219b4fab27 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b599eaae-676f-4940-bb30-962d25acd74e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"6babd445-4dde-4747-b6b7-34b2b4e60175","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-01T02:30:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29847030-znj2t namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29847030-znj2t resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=5a1a4b94-5e3d-4874-94f7-1c1c620559a8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b0f46b6-d380-4a90-8e5d-4393de2ae8c3"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3fe9f705-09c2-4eeb-aa63-26e17577ec67","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-01T02:30:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29847030-v4kfr namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Pod/osd-delete-backplane-serviceaccounts-29847030-v4kfr resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=9b0c0a29-5130-489b-be51-3b2913d520bd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b0f46b6-d380-4a90-8e5d-4393de2ae8c3"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3fe9f705-09c2-4eeb-aa63-26e17577ec67","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-01T02:30:17Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-4d6b6a825269b80dccd43f31d053e0e4-pod namespace=chains-e2e-kfxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=92abab71-82bb-49ff-aa3f-0520b74b6303 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=5e82ebda-42c2-4c87-904c-80506c981dc6"],"authentication.kubernetes.io/node-name":["ip-10-0-128-27.ec2.internal"],"authentication.kubernetes.io/node-uid":["47418516-b2f5-4bb3-8948-e95110a322dd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["a6c6f351-92b3-4478-9dbb-a37fb021b989"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:30:17Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-4d6b6a825269b80dccd43f31d053e0e4-pod namespace=chains-e2e-kfxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=e0d93afe-a04d-4af1-b120-ec50b8fa5177 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=5e82ebda-42c2-4c87-904c-80506c981dc6"],"authentication.kubernetes.io/node-name":["ip-10-0-128-27.ec2.internal"],"authentication.kubernetes.io/node-uid":["47418516-b2f5-4bb3-8948-e95110a322dd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["a6c6f351-92b3-4478-9dbb-a37fb021b989"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:30:17Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-4d6b6a825269b80dccd43f31d053e0e4-pod namespace=chains-e2e-kfxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kfxv/Pod/verify-enterprise-contract-4d6b6a825269b80dccd43f31d053e0e4-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=6ed1233e-66c1-41c4-a05e-0406efc07bd4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=5e82ebda-42c2-4c87-904c-80506c981dc6"],"authentication.kubernetes.io/node-name":["ip-10-0-128-27.ec2.internal"],"authentication.kubernetes.io/node-uid":["47418516-b2f5-4bb3-8948-e95110a322dd"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["a6c6f351-92b3-4478-9dbb-a37fb021b989"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:30:43Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-d2939930a85677891035fbc21c09014a-pod namespace=chains-e2e-kfxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=34ea475c-a631-4488-acbc-0004ed4312f5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:30:43Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-d2939930a85677891035fbc21c09014a-pod namespace=chains-e2e-kfxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=27f94bfb-0261-48e1-b377-34b83d738d99 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:30:43Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-d2939930a85677891035fbc21c09014a-pod namespace=chains-e2e-kfxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kfxv/Pod/verify-enterprise-contract-d2939930a85677891035fbc21c09014a-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=cb939a5d-dac6-4e1b-835d-81b683aa781c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:31:21Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-2a84051be47532b9be1b85755c7fb339-pod namespace=chains-e2e-kfxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=e9ce7176-8a6b-498a-b219-735e1f9b889e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:31:21Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-2a84051be47532b9be1b85755c7fb339-pod namespace=chains-e2e-kfxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=4f0af8ff-ac89-4bb9-a2e1-a2859ffdfb78 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:31:22Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-2a84051be47532b9be1b85755c7fb339-pod namespace=chains-e2e-kfxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kfxv/Pod/verify-enterprise-contract-2a84051be47532b9be1b85755c7fb339-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=ba7e21a4-c938-49a8-bb96-34bf85118f52 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:31:40Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-ea30b67d217ecd038fa954693e90b085-pod namespace=chains-e2e-kfxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=f801035f-d1c1-4db8-ac80-426e51f00fb2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:31:41Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-ea30b67d217ecd038fa954693e90b085-pod namespace=chains-e2e-kfxv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=6a5a83f4-ee47-4d3b-ae24-0a3d5acc17b9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:31:41Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-ea30b67d217ecd038fa954693e90b085-pod namespace=chains-e2e-kfxv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-kfxv/Pod/verify-enterprise-contract-ea30b67d217ecd038fa954693e90b085-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=510d318a-9b8e-4222-8015-dcaa202d57b1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e78408-8cac-45f4-af3f-da3165283be9"],"authentication.kubernetes.io/node-name":["ip-10-0-168-187.ec2.internal"],"authentication.kubernetes.io/node-uid":["874fab75-8354-4c1e-96b6-2bc71d65939f"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["6d1a5e67-ede7-46a8-bc6d-3b3c590be348"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"1f821a8f-9b06-40ca-81a6-4e7df2507e2b","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-01T02:32:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=5d587a1f-b932-4d4a-8d82-d79f9e0c8da4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:32:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=0fc9a79c-fb81-4774-a303-857dc0eaa50e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:32:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=d3ab1022-1004-44b4-9c3d-50a794d1e2e8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:32:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=9954adc1-a544-49df-a290-e5bfdb6d5ad8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:32:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=695b8618-0a38-433d-9588-8781730c1af6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:32:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=a50e1826-8dfb-49a1-830a-eca41100b0a6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:32:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=125eeeae-c122-4565-a2bb-359c8dee48b5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:32:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=5183a383-257d-4bf1-8317-ca273b03835d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:32:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=dcd05a39-3be9-44c4-9eba-6c1397d24ff2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:32:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=6fa1a5c3-8f95-47a1-90af-b554e5392f9c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:32:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=1bd97843-0eaa-43e5-b7dc-0c4c52c857cf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:32:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=ac97724b-812f-4875-9893-c5ea19b6b4df user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:32:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=6cc4ccc8-0176-4308-b21a-e12c72f361ca user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:32:02Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=de0fc810-b055-4ade-a8d5-ca1bb2431026 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-01T02:32:03Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=d3c10b3e-7691-4f8d-ab4a-bf1c2e994680 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=073d1028-1f9e-48cd-b17d-970aada9e918"],"authentication.kubernetes.io/node-name":["ip-10-0-146-60.ec2.internal"],"authentication.kubernetes.io/node-uid":["6b5ad4e6-6148-4332-b7dc-b10af7406602"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["0c6470ef-50e8-4e49-9a63-646b6ee5cd36"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"6a210b59-e71a-4b68-a082-11ab3cc605a3","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2